Openclaw cli: OpenClaw: Shell inline-command parsing could miss an allowlist check (CVE-2026-53866)

CVE-2026-53866 describes a vulnerability in OpenClaw CLI's shell inline-command parsing where certain inline commands can bypass the expected allowlist checks. This occurs because the command request can be routed through a parser case that does not enforce the allowlist decision. The issue is scoped to the shell inline-command feature and does not alter the trusted-operator security model. The vulnerability affects versions >=2026.1.29 and <2026.5.12. The first stable patched version is 2026.5.12.

If the vulnerable feature is enabled and accessible, an attacker or lower-trust input could execute shell commands without the required approval or allowlist prompt, potentially leading to high confidentiality and integrity impact. The actual impact depends on the operator's configuration and whether untrusted inputs can reach this code path. There is no indication of availability impact or known exploits in the wild.

A patch is available in OpenClaw CLI version 2026.5.12; upgrading to this version or later fully mitigates the vulnerability. Until patched, require explicit approval for shell inline-command forms. Additionally, narrow channel and tool allowlists, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature if it is not needed to reduce risk.