Security Advisory

CVE-2026-53857

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-16 18:05:05

Last updated 2026-06-18 03:55:56

Assigner VulnCheck

CVSS score 8.6

State PUBLISHED

Description

OpenClaw before 2026.5.3 contains a policy enforcement vulnerability where Zalo contacts with mutable display metadata could match allowFrom policy entries through display name changes. Attackers with mutable display names could receive agent responses intended for different Zalo identities when the feature is enabled.

← Browse all CVEs View on cve.org ↗