CVE-2026-53848: OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers
Summary
Exec allowlist could miss side effects from transparent command wrappers. In affected versions, a command request that reaches the exec allowlist path could be evaluated against the inner command while the wrapper invocation still executed.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could perform wrapper-level side effects outside the intent of the allowlisted command. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.26.
Mitigations
review wrapper commands carefully and require approval for shell-like wrapper usage until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent. Attackers can craft command requests that bypass allowlist validation by leveraging transparent command wrappers to perform unintended operations.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.26 - Compensating control
Keep channel and tool allowlists narrow (restrict permitted channels/tools to the minimum required) to reduce exposure to wrapper-invocation paths.
- Compensating control
Avoid sharing a single Gateway between mutually untrusted users; isolate Gateways so lower-trust users cannot reach operators or features used by higher-trust users.
- Compensating control
Disable the affected feature when it is not needed (i.e., turn off the exec/wrapper feature or any configuration that enables transparent command wrappers) until the patch is applied.
- Compensating control
Review wrapper commands carefully and require explicit approval for shell-like or transparent wrapper usage until systems are updated to 2026.5.26 or later.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53848?
CVE-2026-53848 has a severity rating of low with a score of 2.3.
How do I fix CVE-2026-53848?
To fix CVE-2026-53848, upgrade to OpenClaw version 2026.5.26 or later.
What type of vulnerability is CVE-2026-53848?
CVE-2026-53848 is categorized as an OS Command Injection vulnerability.
What impact does CVE-2026-53848 have on my system?
CVE-2026-53848 allows for potential execution of unauthorized commands due to an exec allowlist bypass.
Which software versions are affected by CVE-2026-53848?
CVE-2026-53848 affects versions of OpenClaw prior to 2026.5.26.