CVE-2026-53831: OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist

Synopsis

A policy enforcement vulnerability in OpenClaw's system.run safe-bin allowlist allows shell metacharacters to bypass command validation on POSIX nodes. The flaw is reachable over the network and requires low-privilege authentication; no victim interaction is needed. Successful exploitation lets an attacker read arbitrary node-local files and expose sensitive configuration data, including potential credentials or secrets. A patched-image rebuild at version 2026.5.18 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable system.run endpoint is exposed over the network, so the attacker must be able to reach the OpenClaw service remotely.

• AuthenticationRequired

  Any low-privilege operator account is sufficient; no admin rights are needed to craft a malicious command through the allowlist.

• Victim interactionNot required

  The attacker submits the crafted command directly; no user action or social engineering is needed.

• Attack complexityDetail

  Base exploit logic is reliable and condition-free, though the CVSS v4.0 AT:P token indicates that specific target conditions (such as particular POSIX shell configurations) must be present on the node.

Blast Radius

• Reads arbitrary node-local files by abusing shell expansion to escape the approved command set, exposing configuration files, secrets, and stored credentials.
• Reads and potentially exfiltrates sensitive data with high confidentiality impact on the vulnerable component, including API keys or authentication material embedded in config files.
• Modifies or overwrites node-local data with high integrity impact on the vulnerable component, as shell expansion can redirect writes beyond intended paths.
• Causes limited availability degradation on the vulnerable node, consistent with the low availability impact rating in the CVSS vector.