CVE-2026-53847: OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope
Summary
Active Memory write scope could mutate global config. In affected versions, a Gateway caller with operator.write access to the affected command could change global configuration without requiring operator.admin.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could apply configuration changes beyond the intended write scope. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.6.
Mitigations
limit Active Memory write access to trusted operators until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global configuration without requiring operator.admin privileges. Attackers with operator.write access can exploit insufficient scope validation to apply unauthorized configuration changes beyond the intended write scope.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.6 - Configuration
Disable Active Memory write access when it is not required.
OpenClaw Active Memory write access = disabled - Configuration
Limit Active Memory write access to trusted operators until patched.
OpenClaw Active Memory write access = restricted to trusted operators - Configuration
Keep channel allowlist narrow.
OpenClaw channel allowlist = narrow - Configuration
Keep tool allowlist narrow.
OpenClaw tool allowlist = narrow - Compensating control
Avoid sharing one Gateway between mutually untrusted users.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53847?
CVE-2026-53847 has a medium severity rating of 5.3.
What vulnerability does CVE-2026-53847 describe?
CVE-2026-53847 describes a privilege escalation vulnerability in OpenClaw that allows Gateway callers with `operator.write` access to mutate global configuration.
Who is affected by CVE-2026-53847?
Users of OpenClaw versions prior to 2026.5.6 that have `operator.write` permissions are affected by CVE-2026-53847.
How do I fix CVE-2026-53847?
To fix CVE-2026-53847, update OpenClaw to version 2026.5.6 or later.
What potential impact does CVE-2026-53847 have?
CVE-2026-53847 can allow unauthorized changes to global configuration, potentially leading to further exploitation.