Privilege Escalation Vulnerability in OpenClaw by OpenClaw

CVE-2026-53823

What is CVE-2026-53823?

OpenClaw, prior to version 2026.5.3, contains a vulnerability that allows privilege escalation through its allowFrom feature. This weakness is due to the way the application binds to mutable Slack display names. Attackers with access to a Slack account can alter display name metadata, enabling them to align with policy entries and potentially gain unauthorized access to functionalities reserved for other user identities. It is crucial for users to upgrade to the latest version to mitigate this risk.

References