Security Advisory

CVE-2026-53863

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-16 18:05:09

Last updated 2026-06-16 18:55:23

Assigner VulnCheck

CVSS score 6.0

State PUBLISHED

Description

OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidated group IDs. Attackers who can supply a group ID to the policy resolver could trigger incorrect group-policy decisions for tool invocations, potentially bypassing intended access controls.

← Browse all CVEs View on cve.org ↗