Executive brief
OpenClaw is a cloud automation and approval system that manages node pairings for distributed operations. A state mutation vulnerability in the node reconnection logic allows paired nodes to incorrectly expand their approval authority beyond what an operator intended, potentially bypassing approval controls and executing unauthorized operations. This could allow attackers with access to node pairings to escalate privileges or exceed intended operational boundaries.
Technical details
This is a TOCTOU (time-of-check time-of-use) race condition vulnerability affecting OpenClaw's node pairing and reconnection mechanism. When a paired or reconnecting node session re-establishes its connection, the system checks the pairing state to determine what approval scope the node should have, but the state can mutate between the check and use, causing the node to operate with broader authority than intended. The vulnerability requires an authenticated Gateway operator and a reachable affected feature, with practical impact depending on operator configuration and whether untrusted input can reach the affected code path. The attack allows restoration or presentation of broader node authority than configured. A patch is available in version 2026.5.27.
Affected products
- OpenClaw OpenClaw < 2026.5.27
Timeline
- 2026-05-28: disclosed
- 2026-06-13: advisory
- 2026-05-27: patched: Version 2026.5.27 contains the fix
- 2026-08-25: other: GHSA-c85p-9pvr-f7f5 withdrawn as duplicate of GHSA-83w9-h5wv-j9xm