Medium severity5.5NVD Advisory· Published Jun 16, 2026· Updated Jun 16, 2026
CVE-2026-53850
CVE-2026-53850
Description
OpenClaw before 2026.4.25 contains a control scope enforcement bypass vulnerability in the focus command that allows authenticated callers to execute the command without proper authorization checks. Attackers can trigger the focus command to change focus state outside intended caller authority, potentially enabling unauthorized operations depending on gateway configuration and input trust levels.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
openclawnpm | < 2026.4.25 | 2026.4.25 |
Affected products
2Patches
Vulnerability mechanics
References
4News mentions
1- OpenClaw: 25 CVEs Disclosed in a Single Day — Allowlist Bypasses and Privilege Escalation DominateVypr Intelligence · Jun 16, 2026