Openclaw cli: OpenClaw: macOS Swift exec allowlist missed combined POSIX inline flags (CVE-2026-53861)
Description
A vulnerability in OpenClaw CLI on macOS allows combined POSIX inline-command flags to bypass the exec allowlist, potentially executing shell content outside intended restrictions. This affects versions from 2026.1.29 up to but not including 2026.5.6. The impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. A patch is available in version 2026.5.6. Until patched, requiring approval for combined shell flag forms on macOS is recommended, along with general hardening such as narrowing allowlists and disabling the feature if not needed.
CVSS v3.1
Score 6.6medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI on macOS has a vulnerability (CVE-2026-53861) where the exec allowlist misses combined POSIX inline-command flags. This allows command requests using combined flags to bypass the intended inline-command content checks. The vulnerability is scoped to the named feature and configuration and does not alter the trusted-operator model of OpenClaw. The practical impact depends on operator configuration and exposure to lower-trust input. The issue is fixed starting with OpenClaw CLI version 2026.5.6.
Potential Impact
If the affected feature is enabled and accessible, shell commands could be executed outside the intended allowlist, potentially leading to unauthorized command execution. The severity is medium with CVSS 6.6, reflecting high confidentiality and integrity impact but limited attack vector and privileges required. The actual risk depends on the operator's configuration and exposure to untrusted input.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.5.6. Until upgrading, require explicit approval for combined shell flag forms on macOS. Additionally, keep channel and tool allowlists narrow, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not needed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-53861
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac2458912601ec6a31640af
Added to database: 10/04/2026, 12:24:41 UTC
Last enriched: 10/04/2026, 12:34:31 UTC
Last updated: 10/04/2026, 16:08:39 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.