Openclaw cli: OpenClaw: Config recovery could restore openclaw.json with broad file permissions (CVE-2026-53856)

The openclaw-cli tool's configuration recovery process may restore the openclaw.json file with permissions that are more permissive than intended, potentially allowing other users on the same host to read sensitive configuration data. This vulnerability affects versions >=2026.4.23 and <2026.4.24. The risk depends on the operator's configuration and whether lower-trust inputs can access the recovery path. The trusted-operator model remains unchanged, meaning authenticated operators and installed plugins are still trusted. The issue is patched in version 2026.4.24.

If the vulnerable feature is enabled and accessible, local configuration files could be exposed to other users on the same host due to broad file permissions after recovery. This could lead to unauthorized disclosure of sensitive configuration data. The practical impact depends on the environment's OS permissions and operator configuration. There is no indication of remote exploitation or impact on integrity or availability.

A patch is available in version 2026.4.24 and should be applied to resolve the issue. Until patched, operators should verify and correct the permissions of openclaw.json after recovery on shared hosts. Additional mitigations include narrowing channel and tool allowlists, avoiding sharing a Gateway between mutually untrusted users, and disabling the affected feature when not needed.