PT-2026-49025 · Openclaw · Openclaw

Ad Actum + 1 · CVE-2026-53821 · Published 2026-06-12 · Updated 2026-07-02

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.18

Description The software accepts WebSocket client-declared operator scopes before binding to a server-approved pairing or trusted-proxy authorization baseline. This allows unpaired or restricted trusted-proxy Control UI clients to obtain cached operator.admin authority on live WebSocket connections, enabling the execution of admin-gated Gateway RPCs.

Recommendations Update to version 2026.5.18.

Exploit

Fix

Missing Authorization

Incorrect Authorization

Weakness Enumeration

CWE-862

CWE-863

Related Identifiers

CVE-2026-53821

GHSA-QJPC-QF9M-XWMR

Affected Products

Openclaw

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53821.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-qjpc-qf9m-xwmr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-53821 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-qjpc-qf9m-xwmr · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-53821 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2066216132961263834 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1u4qf0e/critical_openclaw_vulnerability_allows · Reddit Post
• https://vulncheck.com/advisories/openclaw-scope-elevation-in-trusted-proxy-control-ui-websocket · Note