Vulnerability Description
OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recognized by the allowlist parser. Remote authenticated operators can bypass execution allowlist checks by using unrecognized encoded-command alias forms to execute arbitrary PowerShell content.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.5.12 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-j472-gf56-x589MitigationVendor Advisory
- https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-powershell-enThird Party Advisory
FAQ
What is CVE-2026-53836?
CVE-2026-53836 is a vulnerability with a CVSS score of 8.8 (HIGH). OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recogni...
How severe is CVE-2026-53836?
CVE-2026-53836 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-53836?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.