CVE-2026-53851

OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers can trigger unintended agent processing by sending reaction events when the feature is enabled, potentially leading to unauthorized processing of lower-trust input.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8	Vendor Advisory
https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openclaw:openclaw::::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta1::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta2::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta3::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta4::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta5::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta6::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta7::::node.js::*
	cpe:2.3:a:openclaw:openclaw:2026.5.12:beta8::::node.js::*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) OpenClaw anterior a 2026.5.12 contiene una vulnerabilidad de omisión de notificaciones que permite que los eventos de reacción de Slack entren en la canalización del agente a pesar de tener las notificaciones de reacción deshabilitadas. Los atacantes pueden desencadenar un procesamiento no intencionado del agente al enviar eventos de reacción cuando la característica está habilitada, lo que podría llevar a un procesamiento no autorizado de entradas de menor confianza.

Information

Published : 2026-06-16 19:17

Updated : 2026-10-25 23:10

NVD link : CVE-2026-53851

Mitre link : CVE-2026-53851

CVE.ORG link : CVE-2026-53851

JSON object : View

Products Affected

openclaw

openclaw

CWE

CWE-862

Missing Authorization

{"id": "CVE-2026-53851", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-53851", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-16T18:42:26.787784Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/openclaw/openclaw", "vendor": "OpenClaw", "product": "OpenClaw", "versions": [{"status": "affected", "version": "0", "lessThan": "2026.5.12", "versionType": "semver"}, {"status": "unaffected", "version": "2026.5.12", "versionType": "semver"}], "packageURL": "pkg:npm/openclaw", "defaultStatus": "unaffected"}]}], "published": "2026-06-16T19:17:02.327", "references": [{"url": "https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8", "tags": ["Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers can trigger unintended agent processing by sending reaction events when the feature is enabled, potentially leading to unauthorized processing of lower-trust input."}, {"lang": "es", "value": "OpenClaw anterior a 2026.5.12 contiene una vulnerabilidad de omisi\u00f3n de notificaciones que permite que los eventos de reacci\u00f3n de Slack entren en la canalizaci\u00f3n del agente a pesar de tener las notificaciones de reacci\u00f3n deshabilitadas. Los atacantes pueden desencadenar un procesamiento no intencionado del agente al enviar eventos de reacci\u00f3n cuando la caracter\u00edstica est\u00e1 habilitada, lo que podr\u00eda llevar a un procesamiento no autorizado de entradas de menor confianza."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "DE7E74F5-925B-4DC3-AFAF-9C0CAD4AADE9", "versionEndExcluding": "2026.5.12"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta1:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "B2F3E79D-C148-461C-9C28-9CAC44DA9C79"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta2:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "707AED9D-DA43-49D7-B7F4-59A191E84F7F"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta3:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "0A703002-3775-4DD0-AA4A-14A80C966009"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta4:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "A4100ECD-456B-46C7-89A5-ECB2AF5ACAE4"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta5:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "49121842-6A84-4C19-8465-A93C67B2FB32"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta6:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "18698933-5F61-484F-88EB-D14A0C684FF0"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta7:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "471D48FA-A3F4-4DC0-A46D-16FBAAB9A3BD"}, {"criteria": "cpe:2.3:a:openclaw:openclaw:2026.5.12:beta8:*:*:*:node.js:*:*", "vulnerable": true, "matchCriteriaId": "2543F40A-7360-496F-9F12-38D9B9B9291A"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}