Openclaw cli: OpenClaw: Trusted retry endpoint checks could match hostname prefixes (CVE-2026-53839)

The openclaw-cli vulnerability (CVE-2026-53839) involves trusted retry endpoint checks that incorrectly validate URLs by matching hostname prefixes rather than exact hostnames. This flaw allows a retry endpoint URL controlled by lower-trust input to pass validation if it uses a hostname prefix resembling a trusted host. This can lead to authentication material being sent to an unintended endpoint outside the intended trust boundary. The vulnerability is scoped to a specific feature and configuration and does not affect the overall trusted-operator model of OpenClaw. The issue affects versions >=2026.1.29 and <2026.5.7. The first stable patched version is 2026.5.7.

If the affected feature is enabled and reachable, authentication material could be sent to an endpoint outside the intended trusted target, potentially exposing sensitive credentials or tokens. The practical impact depends on the operator's configuration and whether lower-trust input can influence the retry endpoint URL. This could lead to unauthorized access or credential leakage in environments where the feature is exposed and misconfigured.

A patch is available in version 2026.5.7 and should be applied to remediate this vulnerability. Until patched, operators should pin retry endpoints to exact trusted origins to prevent hostname prefix matching issues. Additionally, keep channel and tool allowlists narrow, avoid sharing a Gateway between mutually untrusted users, and disable the affected feature when it is not needed to reduce risk.