Is CVE-2026-53854 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-53854 being exploited in the wild.

How severe is CVE-2026-53854?

Medium severity, with a CVSS score of 6.5, published 16 June 2026.

Which products and versions are affected?

openclaw (npm) SEMVER:introduced=0,fixed=2026.4.25; Openclaw < 2026.4.25, <= 2026.4.24.

Is there a fix for CVE-2026-53854?

Yes. openclaw (npm): upgrade to 2026.4.25 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-53854 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-53854?

Check whether you run openclaw (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-53854: OpenClaw privilege escalation in internal and webchat command authentication

Q: Is there a fix for CVE-2026-53854?

Yes. openclaw (npm): upgrade to 2026.4.25 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-53854 attacked?

It is attacked over the network, in a software library.

Q: Am I affected by CVE-2026-53854?

Check whether you run openclaw (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-53854 · Severity: medium · CVSS 6.5 · Published 2026-06-16

OpenClaw is an AI automation platform that manages command execution across channels and roles. A bug in its internal/webchat command authorization allows authenticated users to inherit elevated permissions across channel boundaries, potentially bypassing access controls designed to restrict who can run critical commands. An attacker with low-privilege access to one channel could escalate to owner-level capabilities in another channel, depending on configuration.

Technologies: openclaw (npm), Openclaw. Vendors: npm, Openclaw.

Quick answers

Is CVE-2026-53854 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-53854 being exploited in the wild.
How severe is CVE-2026-53854?: Medium severity, with a CVSS score of 6.5, published 16 June 2026.
Which products and versions are affected?: openclaw (npm) SEMVER:introduced=0,fixed=2026.4.25; Openclaw < 2026.4.25, <= 2026.4.24.
Is there a fix for CVE-2026-53854?: Yes. openclaw (npm): upgrade to 2026.4.25 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-53854 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-53854?: Check whether you run openclaw (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

openclaw (npm): upgrade to 2026.4.25 or later
```
npm install openclaw@2026.4.25
```

Technical details

This vulnerability (CWE-863: Incorrect Authorization) affects the internal and webchat command authentication in OpenClaw versions through 2026.4.24. The root cause is improper inheritance of wildcard ownerAllowFrom state across channel boundaries, allowing a sender on an affected internal or webchat path to inherit authorization privileges outside the intended channel scope. Exploitation requires network reachability and low-level authentication privileges; attack complexity is low and user interaction is not required. An authenticated attacker can execute owner-style command behavior that should have remained channel-scoped, potentially gaining unauthorized control over commands and automation. The vulnerability is patched in version 2026.4.25. Workarounds include keeping owner command allowlists explicit per channel, maintaining narrow channel/tool allowlists, avoiding shared Gateways between mutually untrusted users, and disabling the feature when not needed.

Affected products

openclaw openclaw <=2026.4.24

Identifiers

CVE-2026-53854
GHSA-4hpg-mp64-x7xq

Timeline

2026-06-18: disclosed: Advisory GHSA-4hpg-mp64-x7xq published
2026-04-25: patched: First stable patched version 2026.4.25 released

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.