What is GHSA-8rhr-7x4c-49j6?

GHSA-8rhr-7x4c-49j6 is a security advisory published by GitHub Security Advisories with Medium severity. OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked...

Which CVE IDs does GHSA-8rhr-7x4c-49j6 cover?

GHSA-8rhr-7x4c-49j6 covers the following CVE IDs: CVE-2026-53824. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8rhr-7x4c-49j6?

GHSA-8rhr-7x4c-49j6 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-8rhr-7x4c-49j6MediumCVSS 6.5

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked...

Vendor

GitHub Security Advisories

Published

June 13, 2026

Last Modified

June 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-53824 →

📋 Description

OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing commands during monitor refresh windows. Attackers can exploit stale token acceptance to invoke slash command behavior briefly after token revocation, potentially executing unauthorized actions depending on operator configuration.

🔗 References (4)

https://github.com/openclaw/openclaw/security/advisories/GHSA-4m3v-q747-pc6h
https://nvd.nist.gov/vuln/detail/CVE-2026-53824
https://www.vulncheck.com/advisories/mattermost-slash-token-revocation-lag-via-monitor-refresh-delay
https://github.com/advisories/GHSA-8rhr-7x4c-49j6