Executive brief
OpenClaw is an automation platform that can be managed via chat services like Discord, Slack, or Telegram. A security flaw in its device-pairing plugin allows users who only have basic chat command permissions to generate setup codes for new devices. An attacker with basic chat access could use this to link their own unauthorized device to the system with high-level administrative privileges, gaining a permanent foothold in the environment until the device is manually removed.
Technical details
An authorization bypass vulnerability (CWE-862/CWE-863) exists in the OpenClaw device-pair plugin's /pair endpoint. The application fails to validate if a chat command sender possesses the 'owner', 'admin', or 'pairing' scope before issuing device-pairing bootstrap codes. An attacker with existing low-privileged access to chat commands (e.g., via Telegram, Discord, or Slack agents) can generate these codes to enroll a new device with operator or node capabilities. Once enrolled, the rogue device obtains persistent credentials that remain valid until an administrator manually revokes them. The issue is resolved in version 2026.5.4.
Affected products
- OpenClaw OpenClaw < 2026.5.4
Timeline
- 2026-05-28: advisory: GitHub Security Advisory published
- 2026-05-29: disclosed: NVD publication date