VULNERABILITY INTELLIGENCE

CVE-2026-53838

CVSS score9.8 CRITICAL
EPSS probability0.23%
CISA KEVNot currently listed
Published2026-06-12
Last modified2026-07-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval restrictions.

Weakness classification

  • disclosure@vulncheck.com: CWE-367

Primary references