The vulnerability allows an attacker controlling a WebSocket client to declare operator scopes that are not yet bound to the server’s trusted‑proxy authorization baseline. Because the server does not verify that the declared scope matches an approved pairing, clients that are unpaired or otherwise restricted can gain cached administrator authority. This permits execution of privileged gateway RPC calls that should be limited to system administrators.

Affected vendors and products include OpenClaw OpenClaw. Versions older than 2026.5.18 are vulnerable. No specific patch level is listed beyond the upgrade to 2026.5.18 or newer.

The CVSS score of 8.7 indicates a high‑severity privilege escalation risk. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog, so current exploitation activity is unknown. The likely attack path requires an attacker to establish a WebSocket connection to the trusted‑proxy Control UI and supply an operator scope that whispers admin privileges. If conditions are met, the attacker can invoke administrative RPCs over the live connection.