CVE-2026-53853

Katalog CVE

CVSS 8.3 · High EPSS 0,60%

Kerentanan Protection Mechanism Failure pada openclaw. Skor CVSS 3.1 8.3 (High) menurut vulncheck.com.

Deskripsi (NVD)

OpenClaw before 2026.5.12 contains an argument pattern validation bypass in the exec allowlist that allows attackers to execute disallowed arguments for allowlisted executables on Linux and macOS systems. Attackers can bypass configured argPattern restrictions by directly invoking allowlisted executables with unrestricted arguments, potentially enabling unauthorized file access, network access, or command execution.

Rincian

Terbit di NVD

16 Juni 2026

Terakhir diubah

18 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.3 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-693: Protection Mechanism Failure
CWE-863: Incorrect Authorization

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/openclaw/openclaw/security/advisories/GHSA-v2ww-5rh7-2h5v advisory vendor
• https://www.vulncheck.com/advisories/openclaw-argument-pattern-bypass-in-exec-allowlist-via-linux-and-macos advisory pihak ketiga