OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass
Priority LOW 33CWE-862Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-862.
Summary
OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers can trigger unintended agent processing by sending reaction events when the feature is enabled, potentially leading to unauthorized processing of lower-trust input.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00191 8th percentileScored 2026-11-07
Fix Fixed OpenClaw (OpenClaw): 2026.5.12openclaw (npm): 2026.5.12
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenClaw | OpenClaw | before 2026.5.12 | 2026.5.12 | Patch available | CNA |
| — | openclaw (npm) | before 2026.5.12 | 2026.5.12 | Patch available | GHSA-fcvx-5cxc-v5p8 |
- OpenClaw VendorOpenClaw Affected before 2026.5.12 Fixed in 2026.5.12 Patch available CNA
- openclaw (npm) Vendor— Affected before 2026.5.12 Fixed in 2026.5.12 Patch available GHSA-fcvx-5cxc-v5p8
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* | before 2026.5.12 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta1:*:*:*:node.js:*:* | 2026.5.12 beta1 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta2:*:*:*:node.js:*:* | 2026.5.12 beta2 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta3:*:*:*:node.js:*:* | 2026.5.12 beta3 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta4:*:*:*:node.js:*:* | 2026.5.12 beta4 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta5:*:*:*:node.js:*:* | 2026.5.12 beta5 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta6:*:*:*:node.js:*:* | 2026.5.12 beta6 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta7:*:*:*:node.js:*:* | 2026.5.12 beta7 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta8:*:*:*:node.js:*:* | 2026.5.12 beta8 | Vulnerable | OpenClaw |
- cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* Versions before 2026.5.12 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta1:*:*:*:node.js:*:* Versions 2026.5.12 beta1 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta2:*:*:*:node.js:*:* Versions 2026.5.12 beta2 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta3:*:*:*:node.js:*:* Versions 2026.5.12 beta3 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta4:*:*:*:node.js:*:* Versions 2026.5.12 beta4 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta5:*:*:*:node.js:*:* Versions 2026.5.12 beta5 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta6:*:*:*:node.js:*:* Versions 2026.5.12 beta6 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta7:*:*:*:node.js:*:* Versions 2026.5.12 beta7 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta8:*:*:*:node.js:*:* Versions 2026.5.12 beta8 Vulnerable ·OpenClaw
Remediation
- Fix · CNA OpenClaw (OpenClaw) Fixed in 2026.5.12
- Fix · GHSA-fcvx-5cxc-v5p8 openclaw (npm) Fixed in 2026.5.12 Advisory →
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
OpenClaw 2026.5.12
6 records Highest priority Priority LOW 6 LOW
Other records, highest priority first
- TI-2026-38862 OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command ParsingPriority LOW 35
- TI-2026-38849 OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOSPriority LOW 35
- TI-2026-38836 OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin RedirectsPriority LOW 26
Timeline
- 2026-10-02 Threatist record created from CVE-2026-53851
- 2026-10-03 Alias added: GHSA-fcvx-5cxc-v5p8
References
More Openclaw vulnerabilities
- TI-2026-25309 OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read CVSS 4.0HIGH 8.7
- TI-2026-20394 Exposure of resource to wrong sphere in OpenClaw CVSS 3.1HIGH 8.8
- TI-2026-27742 OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation CVSS 4.0HIGH 8.4
- TI-2026-27766 OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing CVSS 4.0MEDIUM 6.9
- TI-2026-07315 OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication CVSS 4.0MEDIUM 6.9
- TI-2026-17789 OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run CVSS 4.0HIGH 7.5
Sources
- CVE-2026-53851 · CVE Program
- CVE-2026-53851 · NVD
- FIRST EPSS
- GHSA-fcvx-5cxc-v5p8 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences