Low severity3.7NVD Advisory· Published Jun 12, 2026· Updated Jun 16, 2026
CVE-2026-53837
CVE-2026-53837
Description
OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions by sending crafted Mattermost events missing channel type information to process restricted content.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- github.com/openclaw/openclaw/security/advisories/GHSA-gp79-m99v-gjmhnvdMitigationVendor Advisory
- www.vulncheck.com/advisories/openclaw-missing-channel-type-validation-in-mattermost-event-handlersnvdThird Party Advisory
News mentions
1- OpenClaw: 25 CVEs Disclosed in Largest Security Batch, Including Code Execution and Critical Auth BypassVypr Intelligence · Jun 12, 2026