Openclaw cli: OpenClaw: PowerShell encoded-command aliases could miss exec allowlist checks (CVE-2026-53836)

CVE-2026-53836 affects OpenClaw CLI versions >=2026.1.29 and <2026.5.12. The vulnerability arises because PowerShell encoded-command aliases using abbreviated flags can bypass the execution allowlist checks due to the allowlist parser not recognizing these alias forms. This could lead to execution of encoded PowerShell content without the intended allowlist decision. The impact depends on the operator's configuration and whether untrusted input can reach the vulnerable execution path. The vulnerability does not change the existing trusted-operator model of OpenClaw. A patch fixing this issue was released in version 2026.5.12.

If the affected feature is enabled and accessible, attackers could execute encoded PowerShell commands without passing the allowlist checks, potentially leading to full compromise (confidentiality, integrity, and availability impact). The severity is high with a CVSS score of 8.8, indicating critical impact on confidentiality, integrity, and availability. The practical impact depends on the deployment configuration and whether lower-trust inputs can reach the vulnerable code path.

A patch is available in OpenClaw CLI version 2026.5.12 and later; upgrading to this version or beyond fully mitigates the vulnerability. Until patched, avoid allowlisting PowerShell wrapper forms and require explicit approval for encoded commands. Additionally, keep channel and tool allowlists narrow, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not needed.