Critical severity9.8NVD Advisory· Published Jun 12, 2026· Updated Jun 16, 2026
CVE-2026-53838
CVE-2026-53838
Description
OpenClaw before 2026.5.27 contains a state mutation vulnerability in node pairing reconnection that allows paired nodes to confuse approval scope decisions. Attackers can exploit reconnection logic to restore or present broader node authority than intended, potentially bypassing approval restrictions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- github.com/openclaw/openclaw/security/advisories/GHSA-83w9-h5wv-j9xmnvdMitigationVendor Advisory
- www.vulncheck.com/advisories/openclaw-node-pairing-state-mutation-via-reconnectionnvdThird Party Advisory
News mentions
1- OpenClaw: 25 CVEs Disclosed in Largest Security Batch, Including Code Execution and Critical Auth BypassVypr Intelligence · Jun 12, 2026