CVE-2026-53815

Vulnerability

OpenClaw before version 2026.5.19 contains an authorization bypass vulnerability in its message read actions. The software fails to enforce channel allowlist checks when processing certain read requests, allowing lower-trust callers to access messages from channels they are not permitted to read [1][2]. This affects the message read feature when enabled and reachable [1].

Exploitation

An attacker with low privileges (requiring network access but no user interaction) can exploit the insufficient validation by sending specially crafted requests to the affected message read action. The attacker does not need to be authenticated as a trusted operator; they only need access to the vulnerable feature endpoint [1][2]. The attack complexity is low, and no special conditions beyond network access are required [2].

Impact

Successful exploitation leads to unauthorized disclosure of sensitive channel messages. The confidentiality impact is high, as messages from channels not intended for the caller can be exposed [2]. No integrity or availability impact is involved. The attacker gains read access to potentially sensitive communications without proper authorization.

Mitigation

The vulnerability is fixed in version 2026.5.19 [1]. As a workaround, operators should limit access to message read actions to trusted operators, keep channel allowlists narrow, and disable the affected feature when not needed [1]. There is no indication of active exploitation or inclusion on the CISA KEV list.