OpenClaw versions prior to 2026.5.3 allow Zalo contacts with mutable display metadata to match allowFrom policy entries when the display name is changed. Because the policy enforcement relies on display name, an attacker who can modify their own display name may receive agent responses that were intended for another Zalo identity, thereby compromising confidentiality or possibly integrity of exchanged data. The vulnerability is a policy bypass, classified as CWE‑290, and could enable an attacker to read, modify, or replay sensitive messages intended for a different user.

OpenClaw, built on Node.js. No specific version range is listed in the CVE data beyond the fact that all releases before 2026.5.3 are affected. Check installed OpenClaw version to confirm vulnerability.

The CVSS score of 8.6 indicates a high severity. EPSS is < 1 %, showing a very low but non‑zero probability of exploitation at the time of analysis, and the issue is not listed in CISA KEV. The attack vector is inferred to be remote but requires the attacker to interact with the Zalo feature that accepts mutable display names; the vulnerability can be triggered by any user who can alter their display metadata. Given the high CVSS but low EPSS, the overall risk is high severity but the likelihood of or in-the-wild exploitation is currently low.