CVE-2026-53862: OpenClaw < 2026.5.12 - Bootstrap Token Replay via Pending Pairing Scope Widening
Summary
Bootstrap token replay could widen pending pairing scopes. In affected versions, a caller with access to a pending bootstrap token could reuse the token before approval with a broader requested scope set.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
Impact
When the affected feature is enabled and reachable, this could present or retain broader pending pairing authority than intended. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
Patched Versions
The first stable patched version is 2026.5.12.
Mitigations
treat pairing codes as sensitive and cancel unexpected pending pairings until patched. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
Other sources
OpenClaw before 2026.5.12 contains a bootstrap token replay vulnerability allowing callers with pending token access to reuse tokens with broader requested scopes. Attackers can replay bootstrap tokens before approval to escalate pairing authority beyond intended scope limits.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
npm/openclawto a version that resolves this vulnerability.Fixed in 2026.5.12 - Configuration
Disable the bootstrap pairing feature when it is not required to eliminate exposure to bootstrap token replay (disable the affected feature when not needed).
OpenClaw (npm/openclaw) bootstrap pairing feature = disabled - Compensating control
Keep channel and tool allowlists narrow to limit which tools and channels can request pairing or bootstrap tokens.
- Compensating control
Avoid sharing a single Gateway between mutually untrusted users; isolate Gateways so untrusted users cannot access the same Gateway instance.
- Operational
Treat pairing codes as sensitive and cancel unexpected pending pairings until systems are patched; invalidate or revoke any pending bootstrap tokens that appear unexpected.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53862?
CVE-2026-53862 has a medium severity rating of 4.2.
What vulnerability does CVE-2026-53862 describe?
CVE-2026-53862 describes a bootstrap token replay vulnerability in OpenClaw that allows the reuse of tokens with broader scopes.
How do I fix CVE-2026-53862?
To fix CVE-2026-53862, update OpenClaw to version 2026.5.12 or later.
What are the potential impacts of exploiting CVE-2026-53862?
Exploiting CVE-2026-53862 can lead to unauthorized escalation of pairing authority and access to broader system functionalities.
Does CVE-2026-53862 affect all versions of OpenClaw?
CVE-2026-53862 affects OpenClaw versions prior to 2026.5.12.