What is GHSA-gwcq-453v-2frr?

GHSA-gwcq-453v-2frr is a security advisory published by GitHub Security Advisories with High severity. OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin...

Which CVE IDs does GHSA-gwcq-453v-2frr cover?

GHSA-gwcq-453v-2frr covers the following CVE IDs: CVE-2026-53831. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gwcq-453v-2frr?

GHSA-gwcq-453v-2frr has a CVSS v3 base score of 8.3, published by GitHub Security Advisories.

GHSA-gwcq-453v-2frrHighCVSS 8.3

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin...

Vendor

GitHub Security Advisories

Published

June 13, 2026

Last Modified

June 13, 2026

🔗 CVE IDs covered (1)

CVE-2026-53831 →

📋 Description

OpenClaw before 2026.5.18 contains a policy enforcement vulnerability in system.run safe-bin allowlist validation that allows shell expansion to modify command interpretation on POSIX nodes. Authenticated operators can exploit shell metacharacters in approved commands to read unintended node-local files and expose sensitive configuration data.

🔗 References (4)

https://github.com/openclaw/openclaw/security/advisories/GHSA-mhq8-78pj-5j79
https://nvd.nist.gov/vuln/detail/CVE-2026-53831
https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-shell-expansion-in-system-run-safe-bin-allowlist
https://github.com/advisories/GHSA-gwcq-453v-2frr