Openclaw cli: OpenClaw: Exec allowlist could miss side effects from transparent command wrappers (CVE-2026-53848)
Description
OpenClaw CLI versions from 2026.1.29 up to but not including 2026.5.28 have a vulnerability where the exec allowlist may not detect side effects caused by transparent command wrappers. This can lead to unintended wrapper-level side effects executing outside the intended allowlisted command. The issue affects configurations where the vulnerable feature is enabled and reachable. The vulnerability does not alter OpenClaw's trusted-operator model. A fix is available starting with version 2026.5.26. Mitigations include careful review and approval of shell-like wrapper commands, narrowing allowlists, avoiding shared Gateways among untrusted users, and disabling the affected feature if not needed.
CVSS v3.1
Score 4.3medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The exec allowlist feature in OpenClaw CLI could fail to detect side effects from transparent command wrappers. When a command request passes through the exec allowlist, the evaluation might only consider the inner command, while the wrapper invocation still executes, potentially causing unintended side effects. This vulnerability is scoped to the specific feature and configuration and does not affect the overall trusted-operator model of OpenClaw. The practical impact depends on the operator's configuration and whether lower-trust inputs can reach the vulnerable path. The issue is fixed in OpenClaw CLI version 2026.5.26.
Potential Impact
If the affected feature is enabled and accessible, attackers or lower-trust inputs could cause wrapper-level side effects that bypass the exec allowlist's intended restrictions. This could lead to unintended command execution beyond the allowlisted commands, potentially impacting system integrity. The severity is rated medium with a CVSS score of 4.3, reflecting limited impact on confidentiality and availability but some impact on integrity.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.5.26; upgrading to this or later versions resolves the issue. Until patched, operators should carefully review and require approval for shell-like wrapper commands. Additionally, keep channel and tool allowlists narrow, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not needed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-53848
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac2458c12601ec6a3164126
Added to database: 10/04/2026, 12:24:44 UTC
Last enriched: 10/04/2026, 12:35:42 UTC
Last updated: 10/04/2026, 16:08:39 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.