First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-53816

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

OpenClaw before 2026.5.18 contains an insufficient provenance validation vulnerability in node event handling that allows paired nodes to forge exec lifecycle events without system.run authorization. A malicious or compromised paired node can send crafted node.event messages to the gateway, steering target sessions into exec-event paths that expose capabilities the reduced node surface should not provide.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
OpenClaw	OpenClaw	< 2026.5.18

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-3c6j-hq33-3jv4Mitigation, Vendor Advisory
https://www.vulncheck.com/advisories/openclaw-exec-lifecycle-event-forgery-via-paired-nodeThird Party Advisory

Timeline

Published: Jun 11, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-538178.8OpenClaw before 2026.5.22 contains a locality validation vulnerability in Control UI pairing that allows attackers with network access to sp CVE-2026-538186.6OpenClaw before 2026.4.24 contains an authorization bypass vulnerability in the MCP loopback feature that allows non-owner callers to skip o CVE-2026-538197.8OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override CVE-2026-53823.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved. This is an inst CVE-2026-538206.6OpenClaw before 2026.5.12 contains an exec denylist bypass vulnerability in the bundle MCP loopback session-spawn path that allows authentic CVE-2026-538218.8OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trusted-proxy autho CVE-2026-538228.8OpenClaw before 2026.5.18 contains a command injection vulnerability where shell wrapper argv could change between approval and execution. A CVE-2026-538238.1OpenClaw before 2026.5.3 contains a privilege escalation vulnerability in the allowFrom feature that binds to mutable Slack display names. A CVE-2026-538246.5OpenClaw before 2026.4.24 contains a token revocation vulnerability allowing callers with revoked slash tokens to continue executing command CVE-2026-538256.5OpenClaw before 2026.4.7 contains an arbitrary file read vulnerability in the memory-wiki ingest feature that allows authenticated Gateway o CVE-2026-538264.3OpenClaw before 2026.4.26 contains an information disclosure vulnerability in sandboxed session spawning that exposes the real workspace pat CVE-2026-538276.5OpenClaw before 2026.5.2 contains a credential exposure vulnerability in message.action forwarding that allows model-controlled metadata to