Openclaw CVE-2026-32987

Remote unauthenticated attacker can replay valid bootstrap codes during device pairing verification in OpenClaw versions before 2026.3.13. No victim interaction required. Attacker intercepts bootstrap code during initial pairing and resubmits it multiple times to escalate pending pairing scopes to operator.admin privileges.

Real-world risk is CRITICAL despite absence of confirmed exploitation. The CVSS 9.3 score accurately reflects severity: network attack vector (AV:N), low complexity (AC:L), no privileges required (PR:N), and high impact across confidentiality, integrity, and availability (VC:H/VI:H/VA:H). The privilege escalation to operator.admin represents complete compromise of device management capabilities. Attack complexity is genuinely low-attackers need only intercept or observe valid bootstrap codes during pairing, then replay them before administrative approval. No EPSS score available for risk probability assessment, but the combination of unauthenticated network access, simple exploitation mechanics, and severe impact (admin privilege escalation) makes this a priority remediation target. No confirmed active exploitation (not in CISA KEV) and no public exploit identified at time of analysis, providing a remediation window. However, the technical simplicity and critical impact to IoT/device management deployments warrant immediate patching, especially in environments with active device onboarding or where bootstrap codes may be transmitted over observable networks.

An attacker monitors network traffic during legitimate OpenClaw device pairing operations, either through network position (MITM) or compromised network infrastructure, capturing valid bootstrap setup codes transmitted during device enrollment. Before the administrator approves the pending pairing request, the attacker replays the captured bootstrap code multiple times to the device-bootstrap.ts verification endpoint, exploiting the lack of replay protection to escalate the pending pairing request's privilege scopes from standard device access to operator.admin level. Upon administrator approval of what appears to be a legitimate pairing request, the attacker gains full administrative control over the OpenClaw deployment, enabling device manipulation, configuration changes, and potential lateral movement within the managed infrastructure.