Skip to main content

OpenClaw CVE-2026-53822

| EUVD-2026-36610 HIGH
Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
2026-06-12 VulnCheck GHSA-8v2r-mv47-wxfr
Command Injection Openclaw
8.7
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Network-reachable wrapper with authenticated low-priv access (PR:L); winning the approval/execution race raises AC:H; successful bypass yields full CIA impact within the vulnerable system.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
X

Lifecycle Timeline

2
Patch available
Jun 13, 2026 - 02:00 EUVD
Analysis Generated
Jun 12, 2026 - 22:30 vuln.today

DescriptionCVE.org

OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. Attackers can rebuild command arguments after allowlist approval to execute unapproved command shapes, potentially bypassing security controls.

AnalysisAI

Command injection in OpenClaw before 2026.5.18 allows authenticated attackers to modify shell wrapper argv between approval and execution, bypassing the allowlist enforcement. The TOCTOU-style race against the approval gate lets attackers execute unapproved command shapes with the application's privileges, with no public exploit identified at time of analysis but a vendor advisory published via GHSA.

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Authenticate to OpenClaw with low privileges
Delivery
Submit allowlisted command to shell wrapper
Exploit
Mutate argv source after approval
Execution
Wrapper executes unapproved command shape
Persist
Bypass allowlist and run arbitrary command
Impact
Compromise confidentiality integrity availability
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires authenticated access to OpenClaw's shell wrapper command-submission interface (PR:L) and the ability to influence argv between the allowlist approval step and the execution step - the prerequisite is therefore a deployment that exposes the wrapper to users who can supply commands and a target where the argv source is mutable across the approval/execution boundary. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) with VC:H/VI:H/VA:H and a base score of 8.7 indicates a network-reachable, low-complexity flaw requiring only low privileges and yielding full confidentiality, integrity, and availability impact on the vulnerable system - a credible high-priority issue for any deployment exposing the wrapper to authenticated users. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with low-privileged authenticated access submits a command through OpenClaw's shell wrapper that presents an allowlisted argv at approval time, then mutates the underlying argument source so that execution receives a different, unapproved command shape - for example swapping a benign flag for a shell-redirect or invoking an off-allowlist binary. No public exploit code has been identified, but the race window is intrinsic to the wrapper's design and reproducible once the approval/execution split is understood.
Remediation Vendor-released patch: upgrade OpenClaw to 2026.5.18 or later per the GHSA-2j8v-hwgc-x698 advisory (https://github.com/openclaw/openclaw/security/advisories/GHSA-2j8v-hwgc-x698). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all OpenClaw deployments and confirm which are running versions prior to 2026.5.18; document current versions in use. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More from same product – last 7 days

CVE-2026-53836 HIGH
8.7 Jun 12

Remote code execution in OpenClaw before 2026.5.12 allows authenticated operators to bypass the PowerShell execution all
CVE-2026-53819 HIGH
8.7 Jun 11

Arbitrary code execution in OpenClaw before 2026.5.27 lets attackers hijack the Homebrew executable resolved during skil
CVE-2026-53817 HIGH
8.7 Jun 11

Authentication bypass in OpenClaw before 2026.5.22 allows authenticated network attackers to spoof locality information

CVE-2026-53821 HIGH
8.7 Jun 12

Privilege escalation in OpenClaw before 2026.5.18 allows WebSocket-connected Control UI clients to claim operator.admin

CVE-2026-53814 HIGH
8.7 Jun 11

Privilege escalation in OpenClaw before 2026.5.20 allows attackers holding a valid hook token to invoke owner-only MCP t

Share

CVE-2026-53822 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy