GHSA-chr9-m4q2-76hw: OpenClaw: Control UI locality spoofing could mint a durable admin device token
In certain LAN or shared-token Control UI deployments of OpenClaw, an attacker with network or authentication access can spoof locality information used during pairing to obtain a durable admin-capable device token. This token persists beyond rotation of shared gateway tokens unless explicitly removed. The vulnerability arises from overly trusting locality-derived signals for pairing decisions. It does not allow unauthenticated internet attackers to exploit the issue. The vulnerability is fixed in OpenClaw version 2026.5.22.
AI Analysis
Technical Summary
OpenClaw versions prior to 2026.5.22 that use LAN-bound or shared-token Control UI configurations accept locality information as sufficient for pairing decisions. An attacker with existing network or authentication access to the Control UI pairing path can spoof locality data to mint a durable admin device token. This token remains valid even after shared gateway tokens are rotated, unless the paired device is removed. The root cause is a pairing and locality validation flaw that grants excessive trust to locality-derived signals. This vulnerability is tracked as CVE-2026-53817 and is rated high severity with CVSS 4.0 vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N.
Potential Impact
An attacker who already has network or authentication access to the Control UI pairing path can escalate temporary or shared access into a persistent admin device token. This token allows durable administrative capabilities on the device, potentially bypassing token rotation controls. The vulnerability does not expose the Control UI to unauthenticated internet attackers and requires prior foothold. The impact is limited to environments where locality signals are trusted for pairing decisions, such as LAN-bound gateways or shared-token deployments.
Mitigation Recommendations
Upgrade OpenClaw to version 2026.5.22 or later, where this vulnerability is patched. For deployments that cannot immediately upgrade, remove any unexpected paired devices and avoid exposing Control UI pairing paths on networks with untrusted clients to reduce risk.
GHSA-chr9-m4q2-76hw: OpenClaw: Control UI locality spoofing could mint a durable admin device token
Description
In certain LAN or shared-token Control UI deployments of OpenClaw, an attacker with network or authentication access can spoof locality information used during pairing to obtain a durable admin-capable device token. This token persists beyond rotation of shared gateway tokens unless explicitly removed. The vulnerability arises from overly trusting locality-derived signals for pairing decisions. It does not allow unauthenticated internet attackers to exploit the issue. The vulnerability is fixed in OpenClaw version 2026.5.22.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw versions prior to 2026.5.22 that use LAN-bound or shared-token Control UI configurations accept locality information as sufficient for pairing decisions. An attacker with existing network or authentication access to the Control UI pairing path can spoof locality data to mint a durable admin device token. This token remains valid even after shared gateway tokens are rotated, unless the paired device is removed. The root cause is a pairing and locality validation flaw that grants excessive trust to locality-derived signals. This vulnerability is tracked as CVE-2026-53817 and is rated high severity with CVSS 4.0 vector AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N.
Potential Impact
An attacker who already has network or authentication access to the Control UI pairing path can escalate temporary or shared access into a persistent admin device token. This token allows durable administrative capabilities on the device, potentially bypassing token rotation controls. The vulnerability does not expose the Control UI to unauthenticated internet attackers and requires prior foothold. The impact is limited to environments where locality signals are trusted for pairing decisions, such as LAN-bound gateways or shared-token deployments.
Mitigation Recommendations
Upgrade OpenClaw to version 2026.5.22 or later, where this vulnerability is patched. For deployments that cannot immediately upgrade, remove any unexpected paired devices and avoid exposing Control UI pairing paths on networks with untrusted clients to reduce risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-chr9-m4q2-76hw
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53817"]
- Ecosystems
- ["npm"]
- Database Specific Severity
- HIGH
- Cvss Version
- 4.0
Threat ID: 6a46ecd227e9c7971943f32e
Added to database: 07/02/2026, 22:57:22 UTC
Last enriched: 07/02/2026, 23:21:37 UTC
Last updated: 07/03/2026, 03:37:22 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.