A vulnerability in OpenClaw's node pairing feature allows reconnection events to confuse the approval scope state, potentially broadening node authority beyond operator intent. This affects versions prior to 2026.5.27. The issue does not alter the trusted-operator model but can impact configurations where lower-trust inputs reach the affected feature. Operators should revoke unexpected node pairings and re-pair only trusted nodes until patched. The vulnerability is rated high severity.