Executive brief
OpenClaw is a tool used to manage PowerShell command execution with security controls and allowlists. A flaw in how it validates PowerShell encoded commands allows authenticated users to bypass these security restrictions by using abbreviated command aliases, potentially enabling them to execute unauthorized PowerShell commands and compromise system security.
Technical details
This vulnerability is an incomplete allowlist bypass (CWE-184) in OpenClaw's PowerShell encoded-command validation logic. The affected component fails to recognize and block abbreviated flag aliases for PowerShell encoded-command parameters, allowing attackers to construct commands that evade the allowlist parser. The attack requires prior authentication (low privilege level) and network access to the affected system. An authenticated operator can craft encoded PowerShell commands using unrecognized alias forms to execute arbitrary PowerShell content without triggering intended allowlist checks. The vulnerability is patched in version 2026.5.12 and later. Mitigation strategies include avoiding allowlisting PowerShell wrapper forms, requiring approval for encoded commands, and disabling the affected feature if not needed.
Affected products
- OpenClaw OpenClaw < 2026.5.12
Timeline
- 2026-05-28: disclosed: Original advisory GHSA-j472-gf56-x589 published
- 2026-05-12: patched: Patch released in version 2026.5.12
- 2026-06-12: advisory: Published to NVD as CVE-2026-53836
- 2026-06-13: advisory: Duplicate advisory GHSA-ffhm-8fwq-7q27 published