CVE-2026-62218

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.1.20 through 2026.5.26

Description An authorization bypass exists in the device.pair.approve feature. This flaw allows callers with lower trust levels to circumvent role-management checks, enabling them to perform actions that require higher authorization levels by accessing the affected feature through configured input paths.

Recommendations Update OpenClaw to version 2026.5.27 or later. As a temporary mitigation, restrict access to the device.pair.approve feature to minimize the risk of unauthorized access.