What’s Vulnerable › Vulnerabilities

CVE-2026-53824: Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-12 · updated 2026-07-23
• Weakness: CWE-613

Description

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attackers can exploit stale token acceptance to invoke slash command behavior briefly after token revocation, potentially executing unauthorized actions depending on operator configuration.

Affected products

• OpenClaw: before 2026.4.24 — fixed in 2026.4.24

How to fix

Upgrade to a fixed version: OpenClaw 2026.4.24. Check the vendor advisory for mitigations.

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h
• https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay

Get alerted when CVE-2026-53824 or the next vulnerability affects your stack