CVE-2026-53821: OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket

Synopsis

This is a scope elevation (privilege escalation) vulnerability in OpenClaw's trusted-proxy Control UI WebSocket interface, affecting all versions before 2026.5.18. The flaw is reachable over the network and requires only a low-privilege account: an unpaired or restricted trusted-proxy client can send a WebSocket message declaring elevated operator scopes, and OpenClaw accepts them before verifying server-approved authorization, allowing the client to cache operator.admin authority on a live connection. Successful exploitation gives the attacker full admin-gated Gateway RPC access, enabling reads, writes, and disruption of the affected service. A patched-image rebuild at version 2026.5.18 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The vulnerable WebSocket endpoint is exposed over the network, so an attacker must be able to reach the OpenClaw Control UI service remotely.

• AuthenticationRequired

  The attacker must hold at least a low-privilege account sufficient to establish an initial WebSocket connection; no admin credentials are needed to trigger the scope elevation.

• Victim interactionNot required

  No user interaction is needed; the attacker sends a crafted WebSocket message directly to the server without involving any other user.

• Attack complexityDetail

  Attack complexity is low, meaning the exploit is reliable and requires no race conditions, special memory layout, or other environmental prerequisites.

Blast Radius

• Reads any data accessible to operator.admin authority, including gateway configuration, routing rules, and connection metadata.
• Executes admin-gated Gateway RPCs to modify persisted gateway state, reconfigure routing, or add and remove trusted-proxy entries.
• Crashes or degrades the affected OpenClaw gateway service by issuing destructive admin commands over the elevated WebSocket session.
• Establishes a persistent foothold on the live WebSocket connection that survives for the duration of the session without re-authentication.