Privilege Escalation in OpenClaw Products by OpenClaw

CVE-2026-53847

What is CVE-2026-53847?

OpenClaw versions prior to 2026.5.6 expose a critical vulnerability that allows operators with a specific access level to modify global configurations without the necessary administrative privileges. By exploiting insufficient scope validation in the Active Memory write scope, users with operator.write access can enact unauthorized changes that should be restricted, posing a significant security risk. This flaw highlights the importance of strict access controls and validation measures in the management of operator privileges.

References