PatchSiren cyber security CVE debrief

CVE-2026-53820 OpenClaw CVE debrief

CVE-2026-53820 is a MEDIUM-severity vulnerability in OpenClaw, a software that contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path. This vulnerability allows authenticated callers to bypass intended command restrictions, potentially leading to unauthorized access or malicious activity.

Vendor: OpenClaw
Product: Unknown
CVSS: MEDIUM 6.9
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-12
Original CVE updated: 2026-06-16
Advisory published: 2026-06-12
Advisory updated: 2026-06-16

Who should care

Users of OpenClaw before version 2026.5.12 should be aware of this vulnerability and take necessary steps to update to a patched version.

Technical summary

The vulnerability has a CVSS score of 6.9 and is classified as CWE-862. It affects the OpenClaw software and can be exploited by authenticated callers to bypass command restrictions.

Defensive priority

MEDIUM

Recommended defensive actions

Update OpenClaw to version 2026.5.12 or later.
Review and restrict access to the affected bundle MCP loopback session-spawn path.
Monitor for suspicious activity and implement additional security measures as needed.

Evidence notes

The CVE record was published on June 12, 2026, and has a CVSS vector of CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X.

Sources and references

Verified primary and authoritative sources

CVE-2026-53820 CVE Program record
Publisher, destination, and source semantics verified

URL: https://www.cve.org/CVERecord?id=CVE-2026-53820

CVE Program - Official CVE Program record with source-provided CVE metadata.
CVE-2026-53820 NVD vulnerability detail
Publisher, destination, and source semantics verified

URL: https://nvd.nist.gov/vuln/detail/CVE-2026-53820

NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Source reference
Unverified legacy reference

URL: https://github.com/openclaw/openclaw/security/advisories/GHSA-qh2f-99mv-mrcf

[email protected]
Source reference
Unverified legacy reference

URL: https://www.vulncheck.com/advisories/openclaw-exec-denylist-bypass-in-bundle-mcp-loopback-session-spawn

[email protected]

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.