CVE-2026-53827 Details

A credential exposure vulnerability has been identified in OpenClaw versions prior to 2026.5.2. This vulnerability exists in the message.action forwarding feature, where model-controlled metadata can be used to send action payloads, including Gateway credentials, to attacker-supplied loopback URLs. Remote attackers can intercept Gateway tokens and action payloads by providing malicious loopback targets through model-controlled action metadata.

Users are advised to update to OpenClaw version 2026.5.2 or later. Until patched, restrict message action forwarding and avoid model-supplied loopback targets. As a general hardening measure, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when not needed.