CVE-2026-53831: OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-12 · updated 2026-07-23
Weakness: CWE-367

Description

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.

Affected products

OpenClaw: before 2026.5.18 — fixed in 2026.5.18

How to fix

Upgrade to a fixed version: OpenClaw 2026.5.18. Check the vendor advisory for mitigations.

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79
https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist

Get alerted when CVE-2026-53831 or the next vulnerability affects your stack