CVE-2026-53863: OpenClaw < 2026.4.25 - Unvalidated Group ID Acceptance in Tool Group Policy
Summary
Tool group policy callers could accept unvalidated group IDs. In affected versions, a caller that can supply a group id to the affected policy resolver could resolve policy for an unvalidated group id.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could apply the wrong group-policy decision for a tool invocation. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.4.25.
Mitigations
avoid exposing group-policy controlled tools to untrusted senders until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidated group IDs. Attackers who can supply a group ID to the policy resolver could trigger incorrect group-policy decisions for tool invocations, potentially bypassing intended access controls.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.4.25 - Configuration
Disable the tool group policy / group-policy resolver feature when it is not needed to prevent unvalidated group IDs from being accepted.
OpenClaw tool group policy feature = disabled - Compensating control
Avoid exposing group-policy-controlled tools to untrusted senders until the product is upgraded to 2026.4.25.
- Compensating control
Keep channel and tool allowlists narrow (restrict which channels/tools can invoke group-policy-controlled tools) to reduce the risk from untrusted input.
- Compensating control
Avoid sharing a single Gateway instance between mutually untrusted users; isolate Gateway instances or tenant boundaries so lower-trust input cannot reach the affected feature.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53863?
CVE-2026-53863 has a severity rating of 7.1, classified as high.
How do I fix CVE-2026-53863?
To fix CVE-2026-53863, upgrade to OpenClaw version 2026.4.25 or later.
What type of vulnerability is CVE-2026-53863?
CVE-2026-53863 is an input validation vulnerability related to unvalidated group ID acceptance.
What can attackers do with CVE-2026-53863?
Attackers can exploit CVE-2026-53863 to trigger incorrect group-policy decisions, potentially bypassing access controls.
In which software is CVE-2026-53863 found?
CVE-2026-53863 affects OpenClaw software versions prior to 2026.4.25.