CVE-2026-53807

The flaw

OpenClaw before 2026.5.6 contains an authorization bypass vulnerability in Telegram interactive callbacks that allows authenticated users to skip commands.allowFrom validation. Attackers can invoke affected callbacks to mark themselves as a

What to do

Review advisory and patch per vendor guidance.

References