CVE-2026-53863 – OpenClaw < 2026.4.25 – Unvalidated Group ID Acceptance in Tool Group Policy

CVE ID :CVE-2026-53863

Published : June 16, 2026, 7:17 p.m. | 25 minutes ago

Description :OpenClaw before 2026.4.25 contains an input validation vulnerability in tool group policy callers that accept unvalidated group IDs. Attackers who can supply a group ID to the policy resolver could trigger incorrect group-policy decisions for tool invocations, potentially bypassing intended access controls.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…