CVE-2026-53829CWE-451

OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display

High · published June 12, 2026

CVSS v4.0
8.5
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthorized operations after approval.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-451 · User Interface (UI) Misrepresentation of Critical Information
Published
2026-06-12T21:56Z
EPSS history
Timeline
  • 12 JUN 21:56Z
    OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display
    cvelistv5