CVE-2026-53835

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.6

Description A configuration enforcement bypass exists in Feishu dynamic-agent bindings. This issue allows authenticated senders to create or update bindings without adhering to the configured config-write controls. By leveraging the dynamic-agent binding feature, an attacker can modify the sender-agent binding state beyond the intended policy, which may lead to unauthorized binding modifications.

Recommendations Update to version 2026.5.6.