Executive brief
OpenClaw is a Node.js runtime and orchestration platform that manages distributed node clusters. A flaw in the pairing mechanism for Control UI connections allows an authenticated node operator to bypass identity verification and gain unauthorized access to node event execution without going through the required pairing process. This creates an authorization boundary bypass that could allow a compromised or malicious node session to execute privileged operations.
Technical details
The vulnerability is an authentication bypass (CWE-807) in the trusted-proxy Control UI pairing mechanism. When trusted-proxy authentication is enabled, the system accepts client.id=control-ui without verifying device identity or operator role, allowing an authenticated node role websocket client to skip pairing requirements. An attacker with node role credentials can connect unpaired and directly reach node event methods, bypassing the authorization boundary from node-scoped connections. The fix, released in version 2026.2.25, adds an additional check requiring role === "operator" in addition to the client.id verification. Versions prior to 2026.2.25 are affected.
Affected products
- OpenClaw OpenClaw <2026.2.25
Timeline
- 2026-02-26: disclosed: Original advisory published
- 2026-02-26: patched: Fix released in version 2026.2.25
- 2026-03-21: other: Duplicate advisory (GHSA-xh9j-mpc9-2m9p) published
- 2026-03-24: other: Duplicate advisory withdrawn