CVE-2026-53815: OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions

Synopsis

An authorization bypass vulnerability in OpenClaw before version 2026.5.19 allows authenticated low-privilege users to read messages from channels they are not permitted to access, bypassing the channel allowlist check in message read actions. The flaw is reachable over the network and requires only a low-privilege account, with no victim interaction needed. Successful exploitation exposes sensitive channel messages to unauthorized callers. A patched-image rebuild at version 2026.5.19 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable message read endpoint is exposed over the network, so an attacker must be able to reach the service remotely to send crafted requests.

• AuthenticationRequired

  A low-privilege account is sufficient; the attacker does not need administrative credentials, but some valid account is required to invoke the message read actions.

• Victim interactionNot required

  No victim interaction is needed; the attacker sends requests directly to the service without any social-engineering step.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no special timing, race conditions, or environmental setup beyond holding a valid low-privilege account.

Blast Radius

• Reads messages from channels the attacker's account is not authorized to access, including any sensitive content those channels contain.
• Bypasses the channel allowlist control entirely, so the scope of readable messages is bounded only by what exists in OpenClaw, not by the intended permission model.
• Confidentiality of stored channel communications is fully compromised; integrity and availability of data are not affected by this vulnerability.