CVE-2026-53828: Openclaw

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. Attackers can trigger native command handling to bypass the configured owner-command access control, potentially executing privileged commands from unauthorized users.

Affected products

• Openclaw Openclaw: before 2026.5.6 (fixed in 2026.5.6)

Published 2026-06-12. Last modified 2026-07-23.