OpenClaw versions prior to 2026.5.4 contain a vulnerability in the bundled device-pair plugin that allows authorized non-owner chat senders to issue device-pairing bootstrap codes. This enables these users to enroll devices with operator/node capabilities, which retain persistent credentials until removed. The vulnerability requires the attacker to have chat command access and does not affect unauthenticated users. The issue is fixed in version 2026.5.4.