CVE-2026-35639

HIGH8.8

OpenClaw < 2026.3.22 - Privilege Escalation via device.pair.approve Scope Validation

Published Apr 9, 2026

Modified 1 months ago

Details

OpenClaw before 2026.3.22 contains a privilege escalation vulnerability in the device.pair.approve method that allows an operator.pairing approver to approve pending device requests with broader operator scopes than the approver actually holds. Attackers can exploit insufficient scope validation to escalate privileges to operator.admin and achieve remote code execution on the Node infrastructure.

References

FIX

https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87

FIX

https://github.com/openclaw/openclaw/commit/fc2d29ea926f47c428c556e92ec981441228d2a4

ADVISORY

https://github.com/openclaw/openclaw/security/advisories/GHSA-hf68-49fm-59cq

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2026-35639

ADVISORY

https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-device-pair-approve-scope-validation

CVSS Analysis