CVE-2026-53836CWE-184

OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases

High · published June 12, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

OpenClaw before 2026.5.12 contains an allowlist bypass vulnerability in PowerShell encoded-command handling that allows attackers to execute encoded commands using abbreviated flag aliases not recognized by the allowlist parser. Remote authenticated operators can bypass execution allowlist checks by using unrecognized encoded-command alias forms to execute arbitrary PowerShell content.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00820 · 56.8th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2026-06-12T21:56Z
EPSS history
Timeline
  • 12 JUN 21:56Z
    OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases
    cvelistv5