CVE-2026-53848

脆弱性の種類

OpenClaw before 2026.5.26 contains an exec allowlist bypass vulnerability allowing authenticated operators to execute wrapper-level side effects outside allowlisted command intent. Attackers can craft command requests that bypass allowlist validation by leveraging transparent command wrappers to perform unintended operations.

影響を受ける製品

• openclaw openclaw

参考情報

• https://github.com/openclaw/openclaw/security/advisories/GHSA-cwpp-5962-q4f6
• https://www.vulncheck.com/advisories/openclaw-exec-allowlist-bypass-via-transparent-command-wrappers