CVE-2026-53838

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0530%

EPSS Percentile44.74th

Published2026年6月12日

Last Modified2026年6月12日

Vulnerability Description

OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval restrictions.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xm

🔗 https://www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnection

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

関連する脆弱性情報