OpenClaw's trusted-proxy Control UI mode improperly accepted client-declared operator scopes on WebSocket connections before these scopes were validated and bound to a server-approved pairing or authorization baseline. This vulnerability affects deployments using the trusted-proxy authentication mode, allowing a restricted or unpaired trusted-proxy client to gain elevated operator.admin authority on a live WebSocket connection. The issue is resolved in OpenClaw version 2026.5.18 and later.