Executive Summary

CVE-2026-53855 is a vulnerability in OpenClaw versions before 2026.4.2 that allows authenticated operators to bypass strict inline-eval allowlist checks by exploiting shell positional parameters.

Attackers can combine allowlisted tools with shell positional arguments to place inline-eval content in shell carriers that are not covered by the allowlist rules, enabling execution of unapproved shell-provided content.

This issue arises from incomplete input validation and incorrect authorization, allowing command injection outside intended restrictions.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can allow an attacker with authenticated operator access to execute unauthorized shell commands by bypassing strict allowlist rules.

This could lead to improper privilege management, improper access control, and execution of potentially harmful commands outside the intended security boundaries.

The impact depends on the operator's configuration and whether lower-trust input can reach the vulnerable path.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate the vulnerability in OpenClaw versions prior to 2026.4.2, you should take the following immediate steps:

• Avoid allowlisting shell carrier patterns.
• Require approval for shell wrappers until the system is patched.
• Keep channel and tool allowlists as narrow as possible.
• Avoid sharing Gateways between untrusted users.
• Disable the affected feature if it is unnecessary.

Additionally, upgrading to OpenClaw version 2026.4.2 or later, where this vulnerability is patched, is recommended.

Useful 0 Not Useful 0