GHSA-vxx3-6hc9-7cc3: OpenClaw: Combined POSIX shell options could confuse exec revalidation
OpenClaw versions prior to 2026.5.12 contain a vulnerability where combined POSIX shell options can cause inconsistent parsing between approval-time and execution-time, potentially bypassing allowlist decisions. This issue affects the feature when enabled and reachable, allowing inline shell commands to run without intended restrictions. The vulnerability does not alter the trusted-operator model but depends on operator configuration and input trust boundaries. The first stable patched version is 2026.5.12. Until patched, it is recommended to avoid combined shell option forms in allowlisted commands and apply general hardening by narrowing allowlists and disabling the feature if not needed.
AI Analysis
Technical Summary
The vulnerability in OpenClaw (CVE-2026-53806) arises from combined POSIX shell options causing confusion in exec revalidation. Specifically, command requests using combined shell flags may parse shell options differently at approval and execution times, potentially allowing inline shell content execution that bypasses the intended allowlist. This affects versions prior to 2026.5.12. The issue is scoped to a named feature and configuration and does not change the trusted-operator security model. The practical impact depends on operator configuration and whether lower-trust inputs can reach the vulnerable code path.
Potential Impact
If the affected feature is enabled and accessible, attackers may execute inline shell commands without proper allowlist approval, potentially leading to unauthorized command execution. The impact is high due to the possibility of bypassing security controls, but actual exploitation depends on the operator's configuration and input trust boundaries.
Mitigation Recommendations
A stable patch is available in OpenClaw version 2026.5.12. Operators should upgrade to this version to remediate the vulnerability. Until patched, avoid using combined POSIX shell option forms in allowlisted commands. Additionally, maintain narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not required.
GHSA-vxx3-6hc9-7cc3: OpenClaw: Combined POSIX shell options could confuse exec revalidation
Description
OpenClaw versions prior to 2026.5.12 contain a vulnerability where combined POSIX shell options can cause inconsistent parsing between approval-time and execution-time, potentially bypassing allowlist decisions. This issue affects the feature when enabled and reachable, allowing inline shell commands to run without intended restrictions. The vulnerability does not alter the trusted-operator model but depends on operator configuration and input trust boundaries. The first stable patched version is 2026.5.12. Until patched, it is recommended to avoid combined shell option forms in allowlisted commands and apply general hardening by narrowing allowlists and disabling the feature if not needed.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in OpenClaw (CVE-2026-53806) arises from combined POSIX shell options causing confusion in exec revalidation. Specifically, command requests using combined shell flags may parse shell options differently at approval and execution times, potentially allowing inline shell content execution that bypasses the intended allowlist. This affects versions prior to 2026.5.12. The issue is scoped to a named feature and configuration and does not change the trusted-operator security model. The practical impact depends on operator configuration and whether lower-trust inputs can reach the vulnerable code path.
Potential Impact
If the affected feature is enabled and accessible, attackers may execute inline shell commands without proper allowlist approval, potentially leading to unauthorized command execution. The impact is high due to the possibility of bypassing security controls, but actual exploitation depends on the operator's configuration and input trust boundaries.
Mitigation Recommendations
A stable patch is available in OpenClaw version 2026.5.12. Operators should upgrade to this version to remediate the vulnerability. Until patched, avoid using combined POSIX shell option forms in allowlisted commands. Additionally, maintain narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-vxx3-6hc9-7cc3
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53806"]
- Ecosystems
- ["npm"]
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a46ecc627e9c7971943d971
Added to database: 07/02/2026, 22:57:10 UTC
Last enriched: 07/02/2026, 23:19:05 UTC
Last updated: 07/03/2026, 03:28:57 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.