The vulnerability is an authentication bypass in OpenClaw prior to version 2026.2.22. A client that possesses a shared gateway token can connect to the server as role=node without providing a device identity. This flaw, classified as CWE‑863, allows the attacker to impersonate a node during the WebSocket handshake and inject unauthorized node.event calls. These calls trigger normal agent.request and voice.transcript flows that normally require verified device pairing, potentially allowing the attacker to execute privileged actions and alter communications.

The flaw affects the OpenClaw product from the OpenClaw vendor. Any deployment running a version before 2026.2.22 is vulnerable. The relevant CPE is cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*.*

The CVSS score is 5.3, indicating moderate severity. EPSS data is not available and the issue is not listed in the CISA KEV catalog. The attack vector requires the ability to initiate a WebSocket handshake with a shared gateway token; once this is achieved the attacker can receive node_role privileges and inject payloads. Because the flaw permits unauthorized node-role assignment, the risk is significant enough that unpatched deployments should promptly address the issue.