Which versions of OpenClaw are affected by CVE-2026-53828?

OpenClaw's authorization bypass vulnerability allows authenticated users to invoke privileged operations normally reserved for administrators, bypassing configured access controls.. A patch is available.

How to fix or mitigate CVE-2026-53828?

24 hours: Identify and inventory all OpenClaw deployments, document current versions (vulnerable: before 2026.5.6), and assess business criticality. 7 days: Monitor vendor advisory GHSA-p73f-w79w-jqr5 for patch release; evaluate compensating controls. 30 days: Apply vendor patch immediately upon release, or implement sustained compensating controls if patch timeline extends beyond risk tolerance.

OpenClaw CVE-2026-53828

Q: What is the CVSS score of CVE-2026-53828?

CVE-2026-53828 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-36616 HIGH

Incorrect Authorization (CWE-863)

2026-06-12 VulnCheck

GHSA-rwhc-83x6-c8f9

Authentication Bypass Openclaw

7.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable native command handler requires any authenticated sender (PR:L), no user interaction, low complexity, and yields full owner-privilege command execution affecting C/I/A.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jun 13, 2026 - 02:00 EUVD

Analysis Generated

Jun 12, 2026 - 22:32 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.5.6.

DescriptionCVE.org

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. Attackers can trigger native command handling to bypass the configured owner-command access control, potentially executing privileged commands from unauthorized users.

AnalysisAI

Authorization bypass in OpenClaw before 2026.5.6 allows authenticated senders to invoke owner-only native commands without satisfying the configured owner-command policy. Any user with valid credentials can therefore execute privileged operations reserved for the resource owner, undermining the access control model. No public exploit identified at time of analysis, but a GitHub Security Advisory (GHSA-p73f-w79w-jqr5) and a VulnCheck advisory document the flaw.

Technical ContextAI

OpenClaw, identified by cpe:2.3:a:openclaw:openclaw:*, implements a native command handling layer that distinguishes between general commands and owner-restricted commands using a policy-driven access control check. The root cause maps to CWE-863 (Incorrect Authorization): the owner-command enforcement path is reached, but the policy decision is not correctly applied to native command dispatch, so the check is either skipped or returns an incorrect allow decision. This is a classic broken access-control pattern where authentication succeeds but the subsequent authorization step fails to bind the requested action to the caller's owner status.

RemediationAI

Vendor-released patch: upgrade OpenClaw to 2026.5.6 or later, per the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-p73f-w79w-jqr5. If immediate upgrade is not possible, restrict who can authenticate to OpenClaw by tightening account provisioning and revoking credentials for any untrusted senders, since exploitation requires valid authentication; additionally, disable or gate the native command handling path at a network or proxy layer for non-owner principals, accepting that this may break legitimate command flows for those users. Audit recent command invocations against the owner-command policy to detect any prior abuse before patching, and consult the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-native-command-authorization-bypass-via-owner-command-enforcement for additional indicators.