CVE-2026-53829

OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval.

CVSS v3 8.0 HIGH

8.0^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.1 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9	Mitigation Vendor Advisory
https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

History

23 Jul 2026, 09:10

Type	Values Removed	Values Added
Summary		(es) OpenClaw anterior a 2026.5.18 contiene una vulnerabilidad de truncamiento de visualización de aprobación que permite a usuarios autenticados ocultar sufijos de comandos a los aprobadores. Los atacantes pueden enviar comandos exec sobredimensionados con prefijos benignos y sufijos maliciosos para ejecutar operaciones no autorizadas después de la aprobación.

16 Jun 2026, 02:55

Type	Values Removed	Values Added
References	~~() https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9 -~~	() https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9 - Mitigation, Vendor Advisory
References	~~() https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display -~~	() https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display - Third Party Advisory
First Time		Openclaw Openclaw openclaw
CPE		cpe:2.3:a:openclaw:openclaw::::::node.js::*

12 Jun 2026, 22:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-06-12 22:16

Updated : 2026-07-23 09:10

NVD link : CVE-2026-53829

Mitre link : CVE-2026-53829

CVE.ORG link : CVE-2026-53829

JSON object : View

Products Affected

openclaw

openclaw

CWE

CWE-451

User Interface (UI) Misrepresentation of Critical Information

{"id": "CVE-2026-53829", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53829", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-15T16:56:40.701139Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.0, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.1}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/openclaw/openclaw", "vendor": "OpenClaw", "product": "OpenClaw", "versions": [{"status": "affected", "version": "0", "lessThan": "2026.5.18", "versionType": "semver"}, {"status": "unaffected", "version": "2026.5.18", "versionType": "semver"}], "packageURL": "pkg:npm/openclaw", "defaultStatus": "unaffected"}]}], "published": "2026-06-12T22:16:54.347", "references": [{"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-xww8-gqvh-92x9", "tags": ["Mitigation", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/openclaw-command-truncation-in-exec-approval-display", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-451"}]}], "descriptions": [{"lang": "en", "value": "OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval."}, {"lang": "es", "value": "OpenClaw anterior a 2026.5.18 contiene una vulnerabilidad de truncamiento de visualizaci\u00f3n de aprobaci\u00f3n que permite a usuarios autenticados ocultar sufijos de comandos a los aprobadores. Los atacantes pueden enviar comandos exec sobredimensionados con prefijos benignos y sufijos maliciosos para ejecutar operaciones no autorizadas despu\u00e9s de la aprobaci\u00f3n."}], "lastModified": "2026-07-23T09:10:00.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "32D0487B-7776-415C-9EAA-0F4FF4E6AF97", "versionEndExcluding": "2026.5.18"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}