Which versions of OpenClaw are affected by EUVD-2026-36317?

OpenClaw versions prior to 2026.5.7 contain a privilege escalation vulnerability enabling authenticated users to impersonate other identities by manipulating display names, potentially gaining…. A patch is available.

How to fix or mitigate EUVD-2026-36317?

Within 24 hours: Enumerate all OpenClaw deployments and identify systems running versions prior to 2026.5.7; review access policies to understand which agent capabilities are assigned to identities. Within 7 days: Deploy OpenClaw 2026.5.7 to all production environments and validate authentication enforcement against the updated version. Within 30 days: Conduct forensic audit of authentication and access logs (30-day retrospective) for display name manipulation attempts; reset high-privileged user credentials and validate identity-to-capability mappings.

OpenClaw EUVD-2026-36317

Q: What is the CVSS score of EUVD-2026-36317?

EUVD-2026-36317 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-53811 HIGH

Authentication Bypass by Spoofing (CWE-290)

2026-06-11 VulnCheck

GHSA-7hxm-f538-3xp6

Privilege Escalation Authentication Bypass Openclaw

7.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Network-reachable Matrix account suffices (AV:N, PR:L); AC:H reflects the operator-side allowFrom display-name configuration prerequisite; full C/I/A impact since attacker assumes a targeted identity's agent permissions.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 11, 2026 - 21:25 vuln.today

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 npm packages depend on openclaw (4 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.5.7.

DescriptionCVE.org

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability in the Matrix allowFrom feature that allows authenticated accounts to match policy entries through mutable display name metadata. Attackers with the ability to change display names can receive agent access intended for another Matrix identity, potentially gaining unauthorized permissions depending on operator configuration.

AnalysisAI

Privilege escalation in OpenClaw before 2026.5.7 allows authenticated Matrix users to impersonate other identities by manipulating their mutable display name to match policy entries in the allowFrom feature. The flaw stems from authentication relying on a user-controlled attribute (CWE-290), letting attackers receive agent access intended for another Matrix identity. No public exploit identified at time of analysis, but a vendor patch and VulnCheck advisory are available.

Technical ContextAI

OpenClaw integrates with the Matrix communication protocol and uses an allowFrom policy mechanism to grant agent-level access to specific Matrix identities. The vulnerability is rooted in CWE-290 (Authentication Bypass by Spoofing): the allowFrom matcher evaluates the display name field of a Matrix account, which is metadata that any account holder can freely change at will, rather than the immutable Matrix ID (MXID). The affected component is the Matrix policy resolver in OpenClaw (cpe:2.3:a:openclaw:openclaw), where trust is misplaced on a mutable identity attribute instead of cryptographically bound identifiers.

RemediationAI

Vendor-released patch: upgrade to OpenClaw 2026.5.7 or later as described in GHSA-7hxm-f538-3xp6 (https://github.com/openclaw/openclaw/security/advisories/GHSA-7hxm-f538-3xp6). If immediate upgrade is not possible, operators should audit their allowFrom configuration and replace any entries that match on Matrix display names with entries keyed on the immutable Matrix ID (MXID), accepting that this requires reissuing policy on a per-user basis; alternatively, temporarily remove allowFrom-based agent grants and require an alternative authentication path until the patch is applied, with the trade-off of lost automation for legitimate Matrix integrations. Cross-reference the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-mutable-display-names-in-matrix-allowfrom for any additional mitigation guidance.