# CVE-2026-53862: OpenClaw bootstrap token replay in pending pairing scopes

Source: https://junglewise.ai/threats/cve-2026-53862-openclaw-bootstrap-token-replay-in-pending-pairing-scopes  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-16. Updated: 2026-06-18  
License: CC BY 4.0 with a link back

CVE-2026-53862 · Severity: medium · CVSS 4.2 · Published 2026-06-16

OpenClaw, an AI assistant platform, contains a vulnerability in its device pairing process. An attacker with access to a temporary setup token could potentially reuse it to request broader access permissions than originally intended before the pairing is finalized. This could lead to an unauthorized expansion of access rights within the system, depending on how the administrator has configured the gateway.

Technologies: [openclaw (npm)](https://junglewise.ai/threats/technologies/npm-openclaw), [Openclaw](https://junglewise.ai/threats/technologies/openclaw). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-53862 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-53862 being exploited in the wild.

**How severe is CVE-2026-53862?** Medium severity, with a CVSS score of 4.2, published 16 June 2026.

**Which products and versions are affected?** openclaw (npm) SEMVER:introduced=0,fixed=2026.5.12; Openclaw < 2026.5.12, <= 2026.5.10-beta.2.

**Is there a fix for CVE-2026-53862?** Yes. openclaw (npm): upgrade to 2026.5.12 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-53862 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-53862?** Check whether you run openclaw (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- openclaw (npm): upgrade to 2026.5.12 or later

  ```sh
  npm install openclaw@2026.5.12
  ```


## Technical details

A vulnerability in OpenClaw (npm package) allows for bootstrap token replay during the pairing process. In affected versions up to 2026.5.10-beta.2, a caller who possesses a pending bootstrap token can reuse that token to modify and broaden the requested scope set before the pairing is officially approved by an operator. This is classified as Improper Privilege Management (CWE-269). The attack requires network reachability and specific timing (before approval), with a CVSS complexity of High. The issue is resolved in version 2026.5.12.

## Affected products

- openclaw openclaw <= 2026.5.10-beta.2

## Identifiers

- CVE-2026-53862
- GHSA-9v8j-9c9g-w66c

## Timeline

- 2026-05-28: disclosed: Initial disclosure by reporter
- 2026-06-18: advisory: GitHub Advisory published
- 2026-05-12: patched: First stable patched version released

## References

- [https://api.github.com/users/YLChen-007](https://api.github.com/users/YLChen-007)
- [https://github.com/YLChen-007](https://github.com/YLChen-007)
- [https://api.github.com/users/YLChen-007/gists%7B/gist_id%7D](https://api.github.com/users/YLChen-007/gists%7B/gist_id%7D)
- [https://api.github.com/users/YLChen-007/repos](https://api.github.com/users/YLChen-007/repos)
- [https://avatars.githubusercontent.com/u/30854794?v=4](https://avatars.githubusercontent.com/u/30854794?v=4)
- [https://api.github.com/users/YLChen-007/events%7B/privacy%7D](https://api.github.com/users/YLChen-007/events%7B/privacy%7D)

## Related threats

- [OpenClaw incorrect authorization in mcp.app.view method](https://junglewise.ai/threats/cve-2026-102807-openclaw-before-2026-9-4-contains-an-incorrect-authorization)
- [OpenClaw incorrect authorization in Gateway media root allowlist](https://junglewise.ai/threats/cve-2026-102806-openclaw-before-2026-9-5-contains-an-incorrect-authorization)
- [OpenClaw exec approval bypass in Google Meet node commands](https://junglewise.ai/threats/cve-2026-100599-openclaw-versions-2026-5-1-through-2026-7-0-fail-to-apply-the)
- [OpenClaw Signal approval reaction binding logic error](https://junglewise.ai/threats/cve-2026-100598-openclaw-npm-package-openclaw-before-2026-7-1-incorrectly-binds)
- [OpenClaw time-of-check time-of-use race condition in filesystem operations](https://junglewise.ai/threats/cve-2026-100597-openclaw-npm-package-openclaw-before-2026-7-1-is-vulnerable-to-a)