PT-2026-49774 · Openclaw · Openclaw

Philip · CVE-2026-53857 · Published 2026-06-16 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.3

Description A policy enforcement issue exists where Zalo contacts with mutable display metadata can match allowFrom policy entries by changing their display names. This allows attackers with mutable display names to receive agent responses intended for different Zalo identities when the feature is enabled.

Recommendations Update to version 2026.5.3. Use stable Zalo identifiers where available and keep friend access restricted. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the affected feature when it is not needed.

Exploit

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2026-53857

GHSA-8C59-HR4W-QG69

GHSA-W7M7-3XCF-MP48

Affected Products

Openclaw

References · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53857.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-8c59-hr4w-qg69 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-53857 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w7m7-3xcf-mp48 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8c59-hr4w-qg69 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53857 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://t.me/cveNotify/170369 · Telegram Post
• https://t.me/cveNotify/170166 · Telegram Post
• https://vulncheck.com/advisories/openclaw-mutable-display-name-binding-in-zalo-allowfrom-policy · Note
• https://t.me/cveNotify/168761 · Telegram Post