CVE-2026-53845: OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping
Summary
Skill-command dispatch could skip before-tool-call hooks. In affected versions, a skill command routed through the affected dispatch path could run without the same runBeforeToolCallHook coverage as other tool entry points.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could miss hook-based auditing or policy parity for that command path. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.6.
Mitigations
avoid relying on hook-only enforcement for skill commands until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.6 contains a hook bypass vulnerability where skill commands routed through the affected dispatch path skip before-tool-call hook coverage. Attackers can exploit this by sending skill commands through the vulnerable dispatch path to bypass hook-based auditing and policy enforcement mechanisms.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.6 - Configuration
Disable the affected skill-command dispatch path / feature in OpenClaw configuration when it is not required to prevent skill commands from bypassing runBeforeToolCallHook coverage.
OpenClaw skill-command-dispatch-path (affected feature) = disabled - Compensating control
Keep channel and tool allowlists narrow (restrict to the minimum necessary), avoid sharing a single Gateway between mutually untrusted users, and ensure skill commands receive equivalent auditing/approval/sandboxing (do not rely on hook-only enforcement) until systems are upgraded to 2026.5.6.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53845?
The severity of CVE-2026-53845 is rated as low with a score of 2.3.
How do I fix CVE-2026-53845?
To fix CVE-2026-53845, update to OpenClaw version 2026.5.6 or later.
What systems are affected by CVE-2026-53845?
CVE-2026-53845 affects OpenClaw versions prior to 2026.5.6.
What type of vulnerability is CVE-2026-53845?
CVE-2026-53845 is a skill-command dispatch hook bypass vulnerability.
What are the potential impacts of CVE-2026-53845?
The potential impact of CVE-2026-53845 is that skill commands may bypass important execution hooks.