Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass intended command restrictions. Attackers can reach the affected bundled MCP session-spawn path to start sessions with broader command reach than intended.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🟠 OpenClaw, Exec Denylist Bypass, #CVE-2026-53820 (Medium) -DC-Jul2026-829 https://dailycve.com/openclaw-exec-denylist-bypass-cve-2026-53820-medium-dc-jul2026-829/
Post summary
The post announces the disclosure of CVE-2026-53820 for OpenClaw, describing an Exec Denylist Bypass with medium severity, but provides no evidence of PoC, exploit tool, active exploitation, or patch.
CVE-2026-53820 OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authenticated callers to bypass int… https://www.cve.org/CVERecord?id=CVE-2026-53820
Post summary
The text announces a technical vulnerability in OpenClaw but offers no PoC, exploit code, active exploitation evidence, or mitigation guidance, indicating a straightforward disclosure.
CVE-2026-53820 Exec Denylist Bypass in OpenClaw Before 2026.5.12 MCP Loopback Session-Spawn https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53820
Post summary
A new vulnerability, CVE-2026-53820, titled "Exec Denylist Bypass in OpenClaw Before 2026.5.12 MPC Loopback Session-Spawn," has been reported. No evidence of active exploitation, exploit code, or patch is provided, but basic technical details are disclosed.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |