CYBERHAWK / CVE / CVE-2026-32905

CVE-2026-32905

OpenClaw

HIGH CVSS 8.3 other

The flaw

Authorization bypass in device-pair plugin allows unauthorized device enrollment.

What to do

Update to version 2026.5.4 or later

▸ Scan my repo for CVE-2026-32905

References

First seen 2026-06-05 · Tracked by PickBits CyberHawk · Weekly CVE digest