PT-2026-26739 · Openclaw · Openclaw

Tdjackey · Published 2026-03-21 · Updated 2026-03-21 · CVE-2026-32057

NVD

CVSS v3.1

5.9

Medium

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

OpenClaw versions prior to 2026.2.25 contain an authentication bypass vulnerability in the trusted-proxy Control UI pairing mechanism that accepts client.id=control-ui without proper device identity verification. An authenticated node role websocket client can exploit this by using the control-ui client identifier to skip pairing requirements and gain unauthorized access to node event execution flows.

Fix

Weakness Enumeration

CWE-807

Related Identifiers

CVE-2026-32057

Affected Products

Openclaw

References · 4

• https://github.com/openclaw/openclaw/commit/ec45c317f5d0631a3d333b236da58c4749ede2a3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-32057 · Security Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-vvgp-4c28-m3jm · Note
• https://vulncheck.com/advisories/openclaw-authentication-bypass-via-control-ui-client-id-parameter · Note