CVE-2026-53861: OpenClaw < 2026.5.6 - Allowlist Bypass via Combined POSIX Inline Flags on macOS
Summary
macOS Swift exec allowlist missed combined POSIX inline flags. In affected versions, a command request using combined POSIX inline-command flags could miss inline-command content expressed through combined flags.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could run shell content outside the intended allowlist check. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.6.
Mitigations
require approval for combined shell flag forms on macOS until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined POSIX inline-command flags. Attackers can execute shell content outside the intended allowlist check by using combined flag forms, potentially allowing unauthorized command execution depending on operator configuration.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.6 - Configuration
Disable the macOS Swift exec feature when it is not needed to remove the vulnerable code path that can miss combined POSIX inline-command flags.
OpenClaw (macOS Swift exec feature) enabled = false - Configuration
Require operator approval for combined POSIX inline-command/combined shell flag forms on macOS until systems are updated to 2026.5.6.
OpenClaw (macOS Swift exec) require_approval_for_combined_shell_flag_forms = true - Compensating control
Keep channel and tool allowlists narrow (restrict to only required entries) to reduce the chance that lower-trust input reaches the vulnerable feature.
- Compensating control
Avoid sharing a single Gateway between mutually untrusted users; isolate Gateways per trust boundary to limit exposure if the feature is reachable.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53861?
The severity of CVE-2026-53861 is medium with a score of 6.6.
What does CVE-2026-53861 affect?
CVE-2026-53861 affects OpenClaw versions prior to 2026.5.6, specifically in the macOS Swift exec feature.
How do I fix CVE-2026-53861?
You can resolve CVE-2026-53861 by upgrading OpenClaw to version 2026.5.6 or later.
What is the vulnerability type of CVE-2026-53861?
CVE-2026-53861 is classified as an allowlist bypass vulnerability.
What potential impact does CVE-2026-53861 have on systems?
CVE-2026-53861 could allow attackers to execute unauthorized commands by bypassing intended security checks.