Openclaw cli: OpenClaw: Zalo allowFrom could bind to mutable display names (CVE-2026-53857)

The OpenClaw CLI's Zalo allowFrom feature can bind to mutable display names, which are user-controllable metadata. This can cause a Zalo friend or contact with mutable display metadata to match a policy entry incorrectly, potentially resulting in agent responses intended for one identity being received by another. The vulnerability does not alter OpenClaw's trusted-operator model but can be exploited if the affected feature is enabled and reachable. The practical impact depends on the operator's configuration and whether lower-trust inputs can access this feature. The vulnerability affects versions >=2026.1.29 and <2026.5.4 and is patched in 2026.5.3.

If the vulnerable feature is enabled and accessible, an attacker controlling a Zalo identity with mutable display metadata could cause agent responses to be misdirected to them instead of the intended recipient. This can lead to unauthorized disclosure of sensitive information or impersonation within the Zalo communication context. The severity is high with CVSS 8.1, indicating significant confidentiality and integrity impact but no availability impact.

A patch is available starting with OpenClaw version 2026.5.3 and should be applied promptly. Until patched, operators should use stable Zalo identifiers rather than mutable display names, restrict friend access, keep channel and tool allowlists narrow, avoid sharing Gateways between mutually untrusted users, and disable the affected feature if it is not needed.