CVE-2026-53829
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
OpenClaw before version 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval.
Risk Assessment
This vulnerability poses a risk that authenticated users can perform unauthorized operations, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update OpenClaw to version 2026.5.18 or later and to monitor and audit user activities to detect potential abuses.
Original NVD description (English source)
OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval.