CVE-2026-53861 — MEDIUM (6.6)

Q: How severe is CVE-2026-53861?

CVE-2026-53861 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-53861?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.

Vulnerability Description

OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined POSIX inline-command flags. Attackers can execute shell content outside the intended allowlist check by using combined flag forms, potentially allowing unauthorized command execution depending on operator configuration.

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Openclaw	Openclaw	< 2026.5.6

Related Weaknesses (CWE)

CWE-184

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-c226-q6fx-6j6cMitigationVendor Advisory
https://www.vulncheck.com/advisories/openclaw-allowlist-bypass-via-combined-posiThird Party Advisory

FAQ

What is CVE-2026-53861?

CVE-2026-53861 is a vulnerability with a CVSS score of 6.6 (MEDIUM). OpenClaw before 2026.5.6 contains an allowlist bypass vulnerability in the macOS Swift exec feature that misses combined POSIX inline-command flags. Attackers can execute shell content outside the int...

How severe is CVE-2026-53861?

CVE-2026-53861 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-53861?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.