CVE Catalog
CVE-2026-53838
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.22%
13th percentile - higher than 13% of all known CVEs
Summary
State mutation vulnerability in OpenClaw before 2026.5.27 in node pairing reconnection logic. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval restrictions.
Risk Assessment
Risk of bypassing approval restrictions, potentially leading to unauthorized access or privilege escalation.
Recommendation
Update OpenClaw to version 2026.5.27 or later.
Original NVD description (English source)
OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval restrictions.