CVE-2026-53859
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Jun 16, 2026
Vendor
unknown
Description
OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-derived URLs. Attackers can exploit inconsistent hostname checks to reach destinations that operators intended to block through hostname policies.