Beveiligingsadvies

CVE-2026-53849

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-16 18:04:59

Laatst bijgewerkt 2026-06-18 03:55:53

Toegewezen door VulnCheck

CVSS-score 8.6

Status PUBLISHED

Beschrijving

OpenClaw before 2026.5.7 contains a privilege escalation vulnerability where the allowFrom feature improperly validates Discord account identity using mutable display names instead of immutable user IDs. Attackers with Discord accounts can change their display name to match a policy entry and gain unauthorized agent access intended for another Discord identity.

← Alle CVE's bekijken Bekijk op cve.org ↗