OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS
Priority LOW 35CWE-693Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-693.
Summary
OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on Linux and macOS systems. Attackers can bypass configured argPattern restrictions by directly invoking allowlisted executables with unrestricted arguments, potentially enabling unauthorized file access, network access, or command execution.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00347 28th percentileScored 2026-11-07
Fix Fixed OpenClaw (OpenClaw): 2026.5.12openclaw (npm): 2026.5.12
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| OpenClaw | OpenClaw | before 2026.5.12 | 2026.5.12 | Patch available | CNA |
| — | openclaw (npm) | before 2026.5.12 | 2026.5.12 | Patch available | GHSA-v2ww-5rh7-2h5v |
- OpenClaw VendorOpenClaw Affected before 2026.5.12 Fixed in 2026.5.12 Patch available CNA
- openclaw (npm) Vendor— Affected before 2026.5.12 Fixed in 2026.5.12 Patch available GHSA-v2ww-5rh7-2h5v
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* | before 2026.5.12 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta1:*:*:*:node.js:*:* | 2026.5.12 beta1 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta2:*:*:*:node.js:*:* | 2026.5.12 beta2 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta3:*:*:*:node.js:*:* | 2026.5.12 beta3 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta4:*:*:*:node.js:*:* | 2026.5.12 beta4 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta5:*:*:*:node.js:*:* | 2026.5.12 beta5 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta6:*:*:*:node.js:*:* | 2026.5.12 beta6 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta7:*:*:*:node.js:*:* | 2026.5.12 beta7 | Vulnerable | OpenClaw |
| cpe:2.3:a:openclaw:openclaw:2026.5.12:beta8:*:*:*:node.js:*:* | 2026.5.12 beta8 | Vulnerable | OpenClaw |
- cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* Versions before 2026.5.12 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta1:*:*:*:node.js:*:* Versions 2026.5.12 beta1 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta2:*:*:*:node.js:*:* Versions 2026.5.12 beta2 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta3:*:*:*:node.js:*:* Versions 2026.5.12 beta3 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta4:*:*:*:node.js:*:* Versions 2026.5.12 beta4 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta5:*:*:*:node.js:*:* Versions 2026.5.12 beta5 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta6:*:*:*:node.js:*:* Versions 2026.5.12 beta6 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta7:*:*:*:node.js:*:* Versions 2026.5.12 beta7 Vulnerable ·OpenClaw
- cpe:2.3:a:openclaw:openclaw:2026.5.12:beta8:*:*:*:node.js:*:* Versions 2026.5.12 beta8 Vulnerable ·OpenClaw
Remediation
- Fix · CNA OpenClaw (OpenClaw) Fixed in 2026.5.12
- Fix · GHSA-v2ww-5rh7-2h5v openclaw (npm) Fixed in 2026.5.12 Advisory →
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
OpenClaw 2026.5.12
6 records Highest priority Priority LOW 6 LOW
Other records, highest priority first
- TI-2026-38862 OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command ParsingPriority LOW 35
- TI-2026-38847 OpenClaw < 2026.5.12 - Slack Reaction Event Notification BypassPriority LOW 33
- TI-2026-38836 OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin RedirectsPriority LOW 26
Timeline
- 2026-10-02 Threatist record created from CVE-2026-53853
- 2026-10-03 Alias added: GHSA-v2ww-5rh7-2h5v
References
More Openclaw vulnerabilities
- TI-2026-25309 OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read CVSS 4.0HIGH 8.7
- TI-2026-20394 Exposure of resource to wrong sphere in OpenClaw CVSS 3.1HIGH 8.8
- TI-2026-27742 OpenClaw < 2026.3.24 - Arbitrary Code Execution via .npmrc in Local Plugin/Hook Installation CVSS 4.0HIGH 8.4
- TI-2026-27766 OpenClaw < 2026.3.24 - Denial of Service via Feishu Webhook Pre-Auth Body Parsing CVSS 4.0MEDIUM 6.9
- TI-2026-07315 OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication CVSS 4.0MEDIUM 6.9
- TI-2026-17789 OpenClaw < 2026.2.22 - Allowlist Bypass via Command Substitution in system.run CVSS 4.0HIGH 7.5
Sources
- CVE-2026-53853 · CVE Program
- CVE-2026-53853 · NVD
- FIRST EPSS
- GHSA-v2ww-5rh7-2h5v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences