CVE-2026-53853: OpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS

Synopsis

An argument pattern validation bypass in OpenClaw's exec allowlist allows a network-reachable, low-privileged attacker to invoke allowlisted executables with arbitrary arguments on Linux and macOS systems. By crafting requests that skip the configured argPattern restrictions, the attacker can pass arguments the allowlist was designed to block. Successful exploitation enables unauthorized file access, network access, or arbitrary command execution within the process context. A patched-image rebuild at version 2026.5.12 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The CVSS vector specifies AV:N, meaning the attacker must reach the OpenClaw service over the network to deliver the malicious argument payload.

• AuthenticationRequired

  The CVSS vector specifies PR:L, meaning the attacker must hold at least a low-privilege account before exploiting the bypass.

• Victim interactionNot required

  The CVSS vector specifies UI:N, so no user action or social engineering is needed to trigger the vulnerability.

• Attack complexityDetail

  The CVSS vector specifies AC:L with AT:P, meaning the exploit itself is straightforward and condition-free, though successful exploitation may depend on specific target conditions being present in the environment.

Blast Radius

• Reads arbitrary files accessible to the process, including credentials, configuration secrets, and application data.
• Initiates outbound network connections using allowlisted executables as a proxy, enabling data exfiltration or lateral movement.
• Executes operating system commands beyond the scope of the configured allowlist, extending attacker control over the host process.
• Partially degrades service availability (low VA), which may manifest as unexpected process termination or resource exhaustion during exploitation.