CVE-2026-53841: OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML

Published Jun 16, 2026
·
Updated

Summary

Exported session HTML could keep unsafe markdown links. In affected versions, content rendered into an exported session could preserve unsafe javascript: or data: links in generated HTML.

This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.

Impact

When the affected feature is enabled and reachable, this could run browser-side script if a trusted operator opens the exported file and activates the link. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.

Patched Versions

The first stable patched version is 2026.5.12.

Mitigations

do not open exported session HTML from untrusted content in a privileged browser profile until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.

Other sources

OpenClaw before 2026.5.12 contains a cross-site scripting vulnerability in exported session HTML that preserves unsafe javascript: and data: links in generated content. Attackers can execute browser-side scripts if a trusted operator opens the exported file and activates a malicious link.

MITRE

Affected Software

11 affected componentsFixes available
OpenClaw OpenClaw<2026.5.12
OpenClaw Openclaw Node.js<2026.5.12
OpenClaw Openclaw Node.js=2026.5.12-beta1
OpenClaw Openclaw Node.js=2026.5.12-beta2
OpenClaw Openclaw Node.js=2026.5.12-beta3
OpenClaw Openclaw Node.js=2026.5.12-beta4
OpenClaw Openclaw Node.js=2026.5.12-beta5
OpenClaw Openclaw Node.js=2026.5.12-beta6
OpenClaw Openclaw Node.js=2026.5.12-beta7
OpenClaw Openclaw Node.js=2026.5.12-beta8
npm/openclaw<=2026.5.7
2026.5.12

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade npm/openclaw to a version that resolves this vulnerability.

    Fixed in 2026.5.12
  2. Compensating control

    Do not open exported session HTML from untrusted content in a privileged browser profile until patched.

  3. Compensating control

    Keep channel and tool allowlists narrow.

  4. Compensating control

    Avoid sharing one Gateway between mutually untrusted users.

  5. Compensating control

    Disable the exported session HTML feature when it is not needed.

Event History

Jun 16, 2026
CVE Published
via MITRE·06:04 PM
Data Sourced
via MITRE·06:04 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:17 PM
DescriptionSeverityWeaknessAffected Software
Jun 18, 2026
Advisory Published
via GitHub·08:14 PM
Data Sourced
via GitHub·08:14 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-53841?

The severity of CVE-2026-53841 is classified as low, with a score of 2.1.

2

How do I fix CVE-2026-53841?

To fix CVE-2026-53841, update OpenClaw to version 2026.5.12 or later, which addresses the vulnerability.

3

What type of vulnerability is CVE-2026-53841?

CVE-2026-53841 is a Cross-Site Scripting (XSS) vulnerability resulting from unsafe markdown links in exported session HTML.

4

What are the affected software versions for CVE-2026-53841?

The affected versions for CVE-2026-53841 are all versions of OpenClaw prior to 2026.5.12.

5

What can attackers potentially do with CVE-2026-53841?

Attackers can exploit CVE-2026-53841 by using unsafe `javascript:` or `data:` links in exported session HTML to execute malicious scripts in the user's browser.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203