Openclaw cli: OpenClaw: Focus command could miss controlScope enforcement (CVE-2026-53850)
Description
The OpenClaw CLI 'focus' command could bypass controlScope enforcement in affected versions, allowing the command to run without enforcing the expected control scope. This vulnerability affects versions from 2026.1.29 up to but not including 2026.4.25. The impact depends on the operator's configuration and whether lower-trust inputs can reach the vulnerable command path. The issue does not alter OpenClaw's trusted-operator model, meaning trusted Gateway operators and installed plugins remain trusted unless other security boundaries are crossed. A fix is available in version 2026.4.25. Until patched, restricting access to the focus command to trusted operators is recommended, along with narrowing allowlists and disabling the feature if not needed.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-53850 describes a vulnerability in the OpenClaw CLI where the 'focus' command could miss enforcing controlScope, allowing callers able to trigger the command to execute it without the expected scope restrictions. This could lead to changes in focus state beyond the intended caller authority when the feature is enabled and reachable. The vulnerability affects versions >=2026.1.29 and <2026.4.25. The trusted-operator model remains intact, so only operators with certain privileges are impacted unless additional security boundaries are crossed. The issue is patched in version 2026.4.25.
Potential Impact
If exploited, this vulnerability could allow an operator with access to the focus command to change focus state outside their intended control scope. The practical impact depends on the specific configuration of the operator and whether untrusted inputs can reach the vulnerable command. It does not affect the overall trusted-operator model but could lead to unauthorized state changes within the scope of the focus command.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.4.25. Until systems are updated, restrict access to the focus command to trusted operators only. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected focus feature when it is not needed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-53850
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac2458a12601ec6a316411f
Added to database: 10/04/2026, 12:24:42 UTC
Last enriched: 10/04/2026, 12:35:31 UTC
Last updated: 10/04/2026, 16:08:39 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.