Is This vulnerability exploited in the wild?

No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

How severe is This vulnerability?

Critical severity, with a CVSS score of 9.8, published 13 June 2026.

Is there a fix for This vulnerability?

A patch was published on 2026-05-27: Version 2026.5.27 contains the fix Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is This vulnerability attacked?

It is attacked over the network, in a hosted service.

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

OpenClaw node pairing state mutation on reconnection

Severity: critical · CVSS 9.8 · Published 2026-06-13

OpenClaw is a cloud automation and approval system that manages node pairings for distributed operations. A state mutation vulnerability in the node reconnection logic allows paired nodes to incorrectly expand their approval authority beyond what an operator intended, potentially bypassing approval controls and executing unauthorized operations. This could allow attackers with access to node pairings to escalate privileges or exceed intended operational boundaries.

Quick answers

Is This vulnerability exploited in the wild?: No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.
How severe is This vulnerability?: Critical severity, with a CVSS score of 9.8, published 13 June 2026.
Which products and versions are affected?: OpenClaw OpenClaw < 2026.5.27.
Is there a fix for This vulnerability?: A patch was published on 2026-05-27: Version 2026.5.27 contains the fix Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is This vulnerability attacked?: It is attacked over the network, in a hosted service.
Am I affected?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a TOCTOU (time-of-check time-of-use) race condition vulnerability affecting OpenClaw's node pairing and reconnection mechanism. When a paired or reconnecting node session re-establishes its connection, the system checks the pairing state to determine what approval scope the node should have, but the state can mutate between the check and use, causing the node to operate with broader authority than intended. The vulnerability requires an authenticated Gateway operator and a reachable affected feature, with practical impact depending on operator configuration and whether untrusted input can reach the affected code path. The attack allows restoration or presentation of broader node authority than configured. A patch is available in version 2026.5.27.

Affected products

OpenClaw OpenClaw < 2026.5.27

Timeline

2026-05-28: disclosed
2026-06-13: advisory
2026-05-27: patched: Version 2026.5.27 contains the fix
2026-08-25: other: GHSA-c85p-9pvr-f7f5 withdrawn as duplicate of GHSA-83w9-h5wv-j9xm

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.