VulnSocial

CVE-2026-53831Disclosure(openclaw / openclaw)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.

openclaw CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-367

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openclaw

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-06-13); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
openclaw
Products
openclaw

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-13: 3Mentions · 2026-06-23: 1Technical Details · 2026-06-13: 3Technical Details · 2026-06-23: 106-1306-23
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-133
Disclosure3
2026-06-231
General1
Full discourse4 posts
  • Joey Romaine 🇺🇸 |=★=|@Tank23x0
    General

    Patching windows matter. CVE-2026-53831 is a good reminder why. OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in http://system.run safe-bin allowlist validatio... The best defense is the one you set up before you needed it.

    Post summary

    The passage notes CVE-2026-53831 in OpenClaw but provides only a brief technical description and no evidence of exploitation, patches, or PoC. It serves as a general reminder of the need for timely patching.

    0000048
    339 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-53831 OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in http://system.run safe-bin allowlist validation that allows shell expansion to modify command interp… https://www.cve.org/CVERecord?id=CVE-2026-53831 ----- Traducción: CVE-2… http://infoflow.cloud`

    Post summary

    The text announces a policy enforcement vulnerability in OpenClaw, noting shell expansion can alter command execution, without providing PoC, exploit, or mitigation details.

    0000038
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-53831 OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in http://system.run safe-bin allowlist validation that allows shell expansion to modify command interp… https://www.cve.org/CVERecord?id=CVE-2026-53831

    Post summary

    The statement discloses CVE‑2026‑53831 as a policy enforcement flaw in OpenClaw's safe-bin allowlist, enabling shell expansion and command modification, with no evidence of exploits, patches, or active use.

    00000229
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-53831 Policy Enforcement Vulnerability in OpenClaw Before 2026.5.18 Shell Expansion https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53831

    Post summary

    This short notice announces the discovery of a policy enforcement vulnerability in OpenClaw’s Shell Expansion feature prior to version 2026.5.18.

    0000063
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenclawopenclaw-node.js-

Explore more

Back to dashboardopenclaw CVEsopenclaw vulnerabilities