CVE-2026-53821

Analyzed Analyzed - Analysis Complete

WebSocket Authorization Bypass in OpenClaw

Publication date: 2026-06-12

Last updated on: 2026-06-16

Assigner: VulnCheck

Description

OpenClaw before 2026.5.18 accepts WebSocket client-declared operator scopes before binding to server-approved pairing or trusted-proxy authorization baseline. Unpaired or restricted trusted-proxy Control UI clients can obtain cached operator.admin authority on live WebSocket connections to execute admin-gated Gateway RPCs.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-12

Last Modified

2026-06-16

Generated

2026-07-03

AI Q&A

2026-06-13

EPSS Evaluated

2026-07-02

NVD

CVE-2026-53821

EUVD

EUVD-2026-36609

Affected Vendors & Products

Vendor	Product	Version / Range
openclaw	openclaw	to 2026.5.18 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability affects OpenClaw versions before 2026.5.18. The issue is that the software accepts WebSocket client-declared operator scopes before verifying them against the server-approved pairing or trusted-proxy authorization baseline.

As a result, unpaired or restricted trusted-proxy Control UI clients can gain cached operator.admin authority on live WebSocket connections.

This unauthorized admin authority allows these clients to execute admin-gated Gateway RPCs, which should normally be restricted.

Impact Analysis

The vulnerability can lead to unauthorized privilege escalation where unpaired or restricted clients gain admin-level access.

This elevated access allows execution of admin-gated Gateway RPCs, potentially compromising the integrity, confidentiality, and availability of the affected system.

Such unauthorized control could lead to system manipulation, data breaches, or disruption of services.

Hi! I’m here to help you understand CVE-2026-53821. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70