CVE-2026-53865: OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH
Summary
Workspace-derived service PATH could influence trash command selection. In affected versions, a workspace-derived environment path could select an unintended trash executable during maintenance.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could run a local executable from a path the operator did not intend for maintenance tasks. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.2.
Mitigations
keep maintenance flows on trusted workspaces and fixed service paths until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.2 contains a path traversal vulnerability in maintenance task execution that allows workspace-derived service paths to influence trash command selection. Attackers can execute unintended local executables from operator-unintended paths during maintenance operations by manipulating workspace-derived environment paths.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.2 - Compensating control
Keep channel and tool allowlists narrow (restrict channels/tools allowed to interact with OpenClaw) until the patch (2026.5.2) is applied.
- Compensating control
Avoid sharing one Gateway between mutually untrusted users; use separate Gateways or isolation boundaries for different trust domains.
- Compensating control
Disable the affected feature when it is not needed (turn off the workspace-derived maintenance feature or equivalent maintenance task execution capability) until patched.
- Compensating control
Keep maintenance flows on trusted workspaces and use fixed service paths (do not allow workspace-derived service PATHs to influence command selection) until the fixed version 2026.5.2 is deployed.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53865?
The severity of CVE-2026-53865 is classified as high, with a score of 7.1.
How do I fix CVE-2026-53865?
To fix CVE-2026-53865, upgrade to OpenClaw version 2026.5.2 or later.
What type of vulnerability is CVE-2026-53865?
CVE-2026-53865 is a path traversal vulnerability that allows arbitrary command execution.
What impact does CVE-2026-53865 have on OpenClaw users?
CVE-2026-53865 can allow attackers to execute unintended local executables during maintenance tasks.
When was CVE-2026-53865 published?
CVE-2026-53865 was published on June 16, 2026.