VULNERABILITY INTELLIGENCE

CVE-2026-53837

CVSS score3.7 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-06-12
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Description

OpenClaw before 2026.5.6 contains an improper access control vulnerability in Mattermost event handlers that fails to validate channel type metadata. Attackers can bypass intended DM policy decisions by sending crafted Mattermost events missing channel type information to process restricted content.

Weakness classification

  • disclosure@vulncheck.com: CWE-636

Primary references