Openclaw cli: OpenClaw: Bootstrap token replay could widen pending pairing scopes (CVE-2026-53862)

CVE-2026-53862 describes a bootstrap token replay vulnerability in openclaw-cli. A caller with access to a pending bootstrap token can reuse it before approval with a broader requested scope set, potentially widening pending pairing scopes beyond intended limits. This does not alter the trusted-operator model of OpenClaw but can result in broader pending pairing authority when the affected feature is enabled and reachable. The vulnerability affects versions >=2026.1.29 and <2026.5.12. The first stable patched version is 2026.5.12.

The vulnerability could allow an attacker with access to a pending bootstrap token to gain broader pending pairing authority than intended, potentially increasing the scope of access during the pairing process. The practical impact depends on the operator's configuration and whether lower-trust input can reach the vulnerable code path. There is no indication of active exploitation in the wild.

A patch is available in version 2026.5.12; upgrading to this version or later is recommended. Until patched, treat pairing codes as sensitive and cancel any unexpected pending pairings. Additionally, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature if it is not needed.