CVE-2026-53851

OpenClaw before 2026.5.12 contains a notification bypass vulnerability allowing Slack reaction events to enter the agent pipeline despite disabled reaction notifications. Attackers can trigger unintended agent processing by sending reaction events when the feature is enabled, potentially leading to unauthorized processing of lower-trust input.

CVSS 4.0

6.3CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-25)

CWE

CWE-862

Published

2026-06-16

Modified

2026-10-25

Record from

the NVD, synced 2026-10-25

Affected

• openclaw:openclaw

Packages (OSV)

References

• https://github.com/openclaw/openclaw/security/advisories/GHSA-fcvx-5cxc-v5p8
• https://www.vulncheck.com/advisories/openclaw-slack-reaction-event-notification-bypass

Check your stackJSON