CVE-2026-53831
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
OpenClaw before version 2026.5.18 contains a policy enforcement vulnerability in safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.
Risk Assessment
This vulnerability may lead to the exposure of sensitive configuration data, posing a risk to the security of the system and the organization's data. It allows authenticated operators to access information that should be protected.
Recommendation
It is recommended to update OpenClaw to version 2026.5.18 or later to mitigate this vulnerability. Additionally, conducting an audit of operator permissions and monitoring command usage in the system is advisable.
Original NVD description (English source)
OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.