CVE-2026-53819— OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override
Quick assessment
Affected
OpenClaw OpenClaw
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
OpenClaw是OpenClaw开源的一个智能人工助理。 OpenClaw 2026.5.27之前版本存在代码问题漏洞，该漏洞源于技能安装流程中的任意代码执行问题，工作区.env文件可以覆盖Homebrew可执行文件选择。攻击者可以访问受信任的操作员工作区，在技能设置期间执行意外的Homebrew兼容可执行文件，从而破坏系统。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-53819
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override
Source: CVE Program / CVE List V5
Vulnerability Description
OpenClaw before 2026.5.27 contains an arbitrary code execution vulnerability in skill install flows where workspace .env files can override the Homebrew executable selection. Attackers with access to trusted operator workspaces can execute unintended Homebrew-compatible executables during skill setup to compromise the system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不可信的搜索路径
Source: CVE Program / CVE List V5
Vulnerability Title
OpenClaw 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
OpenClaw是OpenClaw开源的一个智能人工助理。 OpenClaw 2026.5.27之前版本存在代码问题漏洞，该漏洞源于技能安装流程中的任意代码执行问题，工作区.env文件可以覆盖Homebrew可执行文件选择。攻击者可以访问受信任的操作员工作区，在技能设置期间执行意外的Homebrew兼容可执行文件，从而破坏系统。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-53819
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53819
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-53819 (2)
Same Patch Batch · OpenClaw · 2026-06-11 · 14 CVEs total
| CVE-2026-53806 | 8.8 HIGH | OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation |
| CVE-2026-53807 | 8.8 HIGH | OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands. |
| CVE-2026-53810 | 8.8 HIGH | OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extensio |
| CVE-2026-53811 | 8.8 HIGH | OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom |
| CVE-2026-53817 | 8.8 HIGH | OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing |
| CVE-2026-53814 | 8.3 HIGH | OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority |
| CVE-2026-53813 | 7.8 HIGH | OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution |
| CVE-2026-53812 | 7.7 HIGH | OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions |
| CVE-2026-53816 | 7.2 HIGH | OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node |
| CVE-2026-53818 | 6.6 MEDIUM | OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback |
| CVE-2026-53808 | 6.5 MEDIUM | OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow |
| CVE-2026-53815 | 6.5 MEDIUM | OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions |
| CVE-2026-53809 | 3.8 LOW | OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy |
IV. Related Vulnerabilities
Same product: OpenClaw
-
CVE-2026-102807
OpenClaw before 2026.9.4 Authorization Bypass via MCP App St -
CVE-2026-102806
OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media -
CVE-2026-100599
OpenClaw 2026.5.1 before 2026.7.1 Remote Code Execution via -
CVE-2026-100598
OpenClaw before 2026.7.1 Approval Binding Logic Error -
CVE-2026-100597
OpenClaw before 2026.7.1 Path Traversal via Filesystem Race
Same vendor: OpenClaw
-
CVE-2026-101884
OpenClaw Windows Node before 2026.7.1 Remote Code Execution -
CVE-2026-101883
OpenClaw Windows Node through 2026.9.4 SSRF via canvas.prese -
CVE-2026-101882
OpenClaw Windows Node before 2026.7.1 Remote Code Execution -
CVE-2026-101881
OpenClaw Windows Node before 2026.7.1 Denial of Service -
CVE-2026-101880
OpenClaw Windows Node before 2026.7.1 Authorization Bypass
Same weakness: CWE-426
-
CVE-2026-59265
Apache OpenOffice, Apache OpenOffice: Opening a malicious do -
CVE-2026-19547
Local Privilege Escalation in Ghostscript for Windows -
CVE-2026-87723
Untrusted Search Path (PATH Hijacking) in fuse-archive -
CVE-2026-100584
OpenClaw before 2026.7.1 Allowlist Bypass via Workspace Shad -
CVE-2026-100310
GNU libextractor before 1.16 Privilege Escalation via LIBEXT
V. Comments for CVE-2026-53819
No comments yet