Openclaw cli: OpenClaw: Native command authorization could skip owner-command enforcement (CVE-2026-53828)

CVE-2026-53828 describes a security flaw in OpenClaw CLI where native command authorization can skip enforcement of owner-only command policies. If the affected feature is enabled and reachable, a sender could run owner-level commands without proper authorization. This bypass occurs despite the existing trusted-operator model, as it specifically targets the native command authorization path. The vulnerability affects versions >=2026.1.29 and <2026.5.6. The first stable patched version is 2026.5.6. The practical impact depends on operator configuration and whether untrusted inputs can reach the vulnerable command path.

An attacker with the ability to trigger native command handling could execute commands intended only for owners, potentially leading to unauthorized command execution. The severity depends on the operator's configuration and exposure of the vulnerable feature. The vulnerability does not compromise the entire trusted-operator model but allows privilege escalation within the native command authorization context.

A patch is available in OpenClaw CLI version 2026.5.6. Operators should upgrade to this version to remediate the vulnerability. Until patched, restrict native command surfaces to trusted senders, keep channel and tool allowlists narrow, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature when not needed.