一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月4日

CVE-2026-53828 [HIGH] – OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command

未分类
📑 文章目录

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in native command handling that allows authenticated senders to execute owner-only commands without proper policy enforcement. Attackers can trigger native command handling to bypass the configured owner-command access control, potentially executing privileged commands from unauthorized users.