CVE-2026-53810: OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata

Synopsis

This is an arbitrary code execution vulnerability in OpenClaw versions before 2026.5.18. An attacker who already has trusted operator access can manipulate marketplace runtime extension metadata to redirect the plugin loader toward unscanned package payloads, bypassing security scanning controls. Successful exploitation gives the attacker full code execution within the OpenClaw runtime. A patched-image rebuild at version 2026.5.18 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable OpenClaw marketplace extension endpoint must be reachable over the network for an attacker to deliver manipulated metadata.

• AuthenticationRequired

  The attacker must hold a trusted operator account; any low-privilege account with operator-level trust is sufficient.

• Victim interactionRequired

  A user or process must trigger extension loading after the metadata has been manipulated, providing the social-engineering or workflow-abuse vector.

• Attack complexityDetail

  The exploit is reliable under standard conditions, though the CVSS v4.0 AT:P token notes that a specific deployment configuration or trust relationship must be present for the attack path to succeed.

Blast Radius

• Attacker executes arbitrary code within the OpenClaw runtime process, outside any reviewed or scanned entry point.
• Attacker reads sensitive data accessible to the OpenClaw process, including stored credentials, tokens, or configuration files (VC:H).
• Attacker modifies application state, persisted data, or runtime behavior controlled by the OpenClaw process (VI:H).
• Attacker can crash or destabilize the OpenClaw runtime, disrupting any service or workload depending on it (VA:H).