Vulnerabilities

TI-2026-38862 CVE-2026-53866 · GHSA-f397-5vjw-v2c2

OpenClaw < 2026.5.12 - Allowlist Bypass in Shell Inline-Command Parsing

LOW 35

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in shell inline-command parsing that allows authenticated operators to execute unapproved commands.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00271 Published 2026-06-16 Fixed in 2026.5.12 CWE-862

TI-2026-38858 CVE-2026-53862 · GHSA-9v8j-9c9g-w66c

OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening

LOW 11

OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to reuse tokens with broader requested scopes.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00088 Published 2026-06-16 Fixed in 2026.5.12 CWE-266

TI-2026-38849 CVE-2026-53853 · GHSA-v2ww-5rh7-2h5v

OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS

LOW 35

OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on Linux and macOS systems.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00347 Published 2026-06-16 Fixed in 2026.5.12 CWE-693

TI-2026-38847 CVE-2026-53851 · GHSA-fcvx-5cxc-v5p8

OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass

LOW 33

OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00191 Published 2026-06-16 Fixed in 2026.5.12 CWE-862

TI-2026-38837 CVE-2026-53841 · GHSA-w9hf-3pp7-pvxv

OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML

LOW 10

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe javascript: and data: links in generated content.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00188 Published 2026-06-16 Fixed in 2026.5.12 CWE-83

TI-2026-38836 CVE-2026-53840 · GHSA-rjxq-qqhf-8hwh

OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects

LOW 26

OpenClaw before 2026.5.12 contains an information disclosure vulnerability in streamable-http MCP servers that forwards operator-configured custom headers during cross-origin redirects.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00223 Published 2026-06-16 Fixed in 2026.5.12 CWE-522