CVE-2026-53866: OpenClaw Shell Inline-Command Parsing Allowlist Bypass Vulnerability
Summary
CVE-2026-53866: OpenClaw: Shell inline-command parsing could miss an allowlist check. Affects openclaw versions < 2026.5.12. Fixed in 2026.5.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for managing shell commands and inline command execution within applications. It allows users to execute shell commands safely while maintaining a trusted operator model. However, a recent vulnerability has been identified that could allow unauthorized execution of shell commands due to a flaw in the inline-command parsing mechanism.
Vulnerability Detail
The vulnerability arises from a failure in the shell inline-command parsing process, which may bypass the expected allowlist check. This flaw allows a command request using shell inline-command forms to be routed through a parser case that does not enforce the necessary security checks. If exploited, this could lead to the execution of shell content without proper authorization, depending on the operator's configuration and the trust level of the input. The potential ramifications include unauthorized command execution and system compromise, making this a significant security concern.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.5.12
This is the first release that contains the fix.
npm install openclaw@2026.5.12Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, it is recommended to require approval for shell inline-command forms until the patch is applied. Additionally, maintain narrow channel and tool allowlists, avoid sharing a single Gateway between untrusted users, and disable the affected feature when it is not in use.
Conclusion
The CVE-2026-53866 vulnerability in OpenClaw poses a significant risk due to the potential for unauthorized command execution. Users are strongly advised to update to the patched version 2026.5.12 and implement the suggested workarounds until the update can be applied. Regular monitoring for vulnerabilities using tools like Vulert can help maintain security.
See every vulnerability recorded for openclaw →
FAQ
CVE-2026-53866 is a vulnerability in the OpenClaw package that allows shell inline-command parsing to bypass allowlist checks, potentially leading to unauthorized command execution.
You can use Vulert's playground at Vulert Scanner to monitor and alert for open-source vulnerabilities in your software without requiring any signup.
The CVSS score of this vulnerability is 8.1, indicating a high severity level.
If immediate updating is not possible, implement the recommended workarounds, such as requiring approval for shell inline-command forms and disabling the affected feature.
More information about OpenClaw can be found on its official repository and documentation pages, which detail its features and usage.
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
