OpenClaw CVE-2026-53843

The attacker must already possess a device that has been successfully paired with the target OpenClaw node and must retain the pairing-scoped device session material; revocation of the node token must have occurred (otherwise there is nothing to bypass). Exploitation is over the network to the OpenClaw WebSocket node interface and requires no user interaction, but it is gated by the PR:L pre-existing low-privilege foothold on a paired device, so it is not exploitable by a fully external unauthenticated attacker against a default deployment that has never paired a device with the attacker. It is limited to OpenClaw versions before 2026.5.26.

The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) yields 8.7 (High), reflecting network-reachable, low-complexity exploitation by an attacker who already holds low-privilege credentials - specifically, control of a previously paired device. There is no CISA KEV listing, no EPSS score provided, and no public exploit identified at time of analysis, so this is best treated as a real but not yet mass-exploited issue. The practical risk is concentrated in scenarios where revocation is the primary control after device compromise or insider offboarding: in those scenarios the impact is severe because the defender believes access is cut when it is not. For deployments where devices are never revoked, the real-world urgency is lower than the CVSS would suggest.

An attacker compromises or retains physical/logical control of a device that was previously paired with an OpenClaw node - for example, a contractor's laptop after offboarding or a stolen IoT controller. The operator revokes the device's node token believing access is cut, but the attacker's surviving pairing-scoped session is replayed over WebSocket to request a new node token, restoring node-level read/write authority without any new approval step. No public exploit is identified at this time, so weaponization would require reverse-engineering the pairing/token flow from the patched diff.