CVE-2026-53843
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
OpenClaw before version 2026.5.26 contains an authorization bypass vulnerability that allows a surviving pairing-scoped device session to re-establish node token authority after revocation. Attackers with a paired device can regain WebSocket node-level access without renewed approval.
Risk Assessment
This vulnerability weakens revocation controls, allowing for prolonged unauthorized access to the system. It may lead to serious security breaches within the organization.
Recommendation
It is recommended to update OpenClaw to version 2026.5.26 or later to mitigate this vulnerability. Additionally, an audit of existing paired device sessions should be conducted.
Original NVD description (English source)
OpenClaw before 2026.5.26 contains an authorization bypass vulnerability where a surviving pairing-scoped device session can re-establish node token authority after revocation. Attackers with a paired device can regain WebSocket node-level access without renewed approval, weakening revocation controls and maintaining unauthorized access longer than intended.