[CVE-2026-53829] OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticat…

Descripción técnica

OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval.

Puntuación CVSS

Score: 8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Openclaw — Openclaw

Debilidades (CWE)

CWE-451

Fuente oficial

Publicado en NIST NVD.