PT-2026-49783 · Openclaw · Openclaw

Edward-X · CVE-2026-53866 · Published 2026-06-16 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.12

Description An allowlist bypass exists in shell inline-command parsing. A command request using shell inline-command forms can route through a parser case that misses the expected allowlist decision, allowing authenticated operators to execute unapproved shell content without the intended approval prompts.

Recommendations Update to version 2026.5.12. Require approval for shell inline-command forms. Keep channel and tool allowlists narrow. Avoid sharing one Gateway between mutually untrusted users. Disable the shell inline-command feature when it is not needed.

Exploit

Fix

Incomplete List of Disallowed Inputs

Missing Authorization

Weakness Enumeration

CWE-184

CWE-862

Related Identifiers

CVE-2026-53866

GHSA-F397-5VJW-V2C2

GHSA-V383-2WGG-V483

Affected Products

Openclaw

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53866.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-f397-5vjw-v2c2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53866 · Security Note
• https://osv.dev/vulnerability/CVE-2026-53866 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v383-2wgg-v483 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f397-5vjw-v2c2 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://t.me/cveNotify/168770 · Telegram Post
• https://t.me/cveNotify/170171 · Telegram Post
• https://vulncheck.com/advisories/openclaw-allowlist-bypass-in-shell-inline-command-parsing · Note