CVE-2026-53815

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0820%

EPSS Percentile39.55th

Published2026年6月11日

Last Modified2026年6月12日

Vulnerability Description

OpenClaw before 2026.5.19 contains an authorization bypass vulnerability in message read actions that skips channel allowlist checks. Lower-trust callers can request messages from channels not intended for them by exploiting insufficient validation in the affected feature, potentially exposing sensitive channel messages.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/openclaw/openclaw/security/advisories/GHSA-q7q8-3mgw-q67r

🔗 https://www.vulncheck.com/advisories/openclaw-channel-allowlist-bypass-in-message-read-actions

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅