CVE-2026-53808

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.6

Description An approval policy bypass exists in the Skill Workshop apply flow. This issue allows agent tool calls to set the apply variable to true even when the approvalPolicy is configured as pending. An attacker can reach the affected apply path to implement workshop changes before the required approval step, which may lead to unauthorized configuration modifications.

Recommendations Update to version 2026.5.6.