CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.5.18 are vulnerable to an authorization bypass in the device-pair approval feature, allowing lower-trust users to perform unauthorized actions. This vulnerability can be exploited through misconfigured input paths, potentially leading to unauthorized access or persistence of malicious actions. Organizations utilizing OpenClaw should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended authorization. Attackers can exploit misconfigured input paths to execute or persist unauthorized actions when the affected feature is enabled and reachable.
Related CVEs
Other vulnerabilities affecting the same vendor(s)