1. Home
  2. CVE Database
  3. CVE-2026-53847
MEDIUM · 5.4

CVE-2026-53847

OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global configuration without ...

Vulnerability Description

OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global configuration without requiring operator.admin privileges. Attackers with operator.write access can exploit insufficient scope validation to apply unauthorized configuration changes beyond the intended write scope.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
OpenclawOpenclaw< 2026.5.6

Related Weaknesses (CWE)

CWE-266

References

FAQ

What is CVE-2026-53847?

CVE-2026-53847 is a vulnerability with a CVSS score of 5.4 (MEDIUM). OpenClaw before 2026.5.6 contains a privilege escalation vulnerability in the Active Memory write scope that allows Gateway operators with operator.write access to modify global configuration without ...

How severe is CVE-2026-53847?

CVE-2026-53847 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-53847?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.