Which versions of OpenClaw are affected by CVE-2026-53831?

OpenClaw versions prior to 2026.5.18 allow authenticated operators to bypass security controls and read arbitrary configuration files on affected systems, creating a direct path to sensitive data…. A patch is available.

How to fix or mitigate CVE-2026-53831?

Within 24 hours: Identify all systems running OpenClaw versions before 2026.5.18 and audit which personnel and service accounts hold operator privileges. Within 7 days: Restrict operator account access to minimal required functions; enable detailed logging and real-time alerting on all safe-bin command invocations; consider disabling shell metacharacter expansion features if operationally feasible. Within 30 days: Monitor vendor advisories for OpenClaw 2026.5.18 release and deploy immediately upon availability; conduct forensic review of operator activity logs for the past 90 days to detect any unauthorized file access patterns.

OpenClaw CVE-2026-53831

Q: What is the CVSS score of CVE-2026-53831?

CVE-2026-53831 has a CVSS 4.0 base score of 7.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-36619 HIGH

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-06-12 VulnCheck

GHSA-gwcq-453v-2frr

Information Disclosure Openclaw

7.6

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.1 HIGH

Authenticated operator (PR:L) submits crafted system.run over the network (AV:N/AC:L, UI:N); primary described impact is sensitive file read (C:H) with limited integrity from command reinterpretation (I:L) and no availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jun 13, 2026 - 02:00 EUVD

Analysis Generated

Jun 12, 2026 - 22:34 vuln.today

DescriptionCVE.org

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.

AnalysisAI

Information disclosure in OpenClaw before 2026.5.18 lets authenticated operators abuse shell metacharacter expansion within the system.run safe-bin allowlist to read unintended node-local files on POSIX nodes and exfiltrate sensitive configuration data. The flaw bypasses command-policy enforcement because the allowlist validates a literal command string while the underlying shell re-interprets it at execution time. No public exploit identified at time of analysis.

Technical ContextAI

OpenClaw exposes a system.run capability that vets requested commands against a safe-bin allowlist before dispatching them to managed nodes. On POSIX nodes the command is handed to a shell, so wildcards, brace expansion, command substitution ($()/backticks), variable expansion, and IFS handling can alter which binary actually runs or which paths are read after the allowlist check. CWE-367 (Time-of-check Time-of-use) characterizes this gap: the policy engine checks a stable, vetted string but the shell re-parses and expands it before execution, opening a window where the operator-supplied operand changes the effective command. The affected CPE is cpe:2.3:a:openclaw:openclaw:* on POSIX-based deployments.

RemediationAI

Vendor-released patch: OpenClaw 2026.5.18 - upgrade to this version or later per advisory GHSA-mhq8-78pj-5j79 (https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79). If immediate upgrade is not possible, tighten operator role assignments to the minimum trusted set and scope or disable the system.run capability on POSIX nodes; route approved commands through an execve-style invocation that does not spawn a shell, which removes metacharacter expansion at the cost of breaking legitimate uses that rely on globs or pipelines; and enable auditing of system.run arguments for shell metacharacters (` `, $(, *, ?, |, ;, &, <, >`) to surface abuse attempts. Each workaround reduces operator productivity by limiting legitimate command flexibility, so prefer the patch.