Openclaw cli: OpenClaw: BlueBubbles sender policy could match mutable conversation identifiers (CVE-2026-53860)

CVE-2026-53860 describes a vulnerability in the BlueBubbles sender policy of OpenClaw CLI where mutable conversation identifiers can be matched against allowlist entries instead of stable sender identities. This flaw allows a participant who can influence conversation metadata to impersonate or bypass sender restrictions, potentially receiving agent responses intended for a different sender. The vulnerability is scoped to the BlueBubbles feature and does not alter the trusted-operator model of OpenClaw. The issue affects versions >=2026.1.29 and <2026.5.7. The first stable patched version is 2026.5.7.

If the affected feature is enabled and accessible, an attacker able to manipulate conversation-level identifiers could receive agent responses that should be restricted to specific senders. The practical impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. The confidentiality and integrity of agent responses could be partially compromised. There is no indication of availability impact or known exploits in the wild.

A patch is available in OpenClaw CLI version 2026.5.7; upgrading to this version or later resolves the issue. Until patched, operators should prefer stable sender identifiers and restrict BlueBubbles groups. Additional mitigations include keeping channel and tool allowlists narrow, avoiding sharing a Gateway between mutually untrusted users, and disabling the affected feature when it is not needed.