VulnSocial

CVE-2026-53832Disclosure(openclaw / openclaw)

LOWCVSS 7.1 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers with access to the proxy-facing Gateway port can supply forged identity headers to assume operator identity and potentially escalate privileges.

openclaw CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-290

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openclaw

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-06-13); latest day: 1
  • 4 total mentions across 2 days

Affected systems

Vendors
openclaw
Products
openclaw

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-06-13: 3Mentions · 2026-06-15: 1PoC Mentioned / Linked · 2026-06-15: 1Technical Details · 2026-06-13: 3Technical Details · 2026-06-15: 106-1306-15
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-06-133
Disclosure3
2026-06-151
Disclosure1
Full discourse4 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Disclosure

    #CVE-2026-53832 - Privilege escalation in #Openclaw. Proxy identity header forgery allows attackers to assume operator identity. #CVSS 7.7. #CVE #infosec @openclaw #cybersecurity #AI #developers #python #jquery #devsecops #devops #sysadmin More info: https://www.valtersit.com/cve/CVE-2026-53832

    Post summary

    The tweet announces CVE-2026-53832, a privilege‑escalation flaw in Openclaw caused by forged proxy identity headers, with a CVSS score of 7.7 and a link for further details. No exploitation, patch, or false‑positive claims are mentioned.

    0000042
    929 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-53832 OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers wit… https://www.cve.org/CVERecord?id=CVE-2026-53832 ----- Traducción: CVE-2026-53832 Ope… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-53832, highlighting an identity header validation flaw that allows same-host callers to forge trusted-proxy headers, but does not provide a PoC, exploit, or patch details.

    0000035
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-53832 OpenClaw before 2026.5.18 contains an identity header validation vulnerability allowing local same-host callers to forge trusted-proxy identity headers. Attackers wit… https://www.cve.org/CVERecord?id=CVE-2026-53832

    Post summary

    The text announces CVE‑2026‑53832, describing an identity header validation flaw in OpenClaw versions before 2026.5.18 that allows local callers to forge trusted‑proxy identity headers.

    00000200
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-53832 Identity Header Forgery Vulnerability in OpenClaw Before 2026.5.18 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-53832

    Post summary

    The post announces a new Identity Header Forgery vulnerability (CVE‑2026‑53832) affecting OpenClaw prior to version 2026.5.18, without providing proof‑of‑concept, exploit code, or patch details.

    0000059
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenclawopenclaw-node.js-

Explore more

Back to dashboardopenclaw CVEsopenclaw vulnerabilities