PT-2026-49028

CVE-2026-53824

·

Published

2026-06-12

·

Updated

2026-07-02

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.24
Description An issue exists where callers with revoked slash tokens can continue executing commands during monitor refresh windows. This stale token acceptance allows attackers to briefly invoke slash command behavior after token revocation, which may lead to the execution of unauthorized actions depending on the operator configuration.
Recommendations Update to version 2026.4.24.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-613: Insufficient Session Expiration
Related identifiers
CVE-2026-53824
GHSA-4M3V-Q747-PC6H
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com