Description (CNA)
OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device pairing credentials can execute arbitrary node commands on the host system without proper node pairing validation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenClaw / OpenClaw | affected 0 before 2026.3.31; unaffected 2026.3.31 |
CWE
CWE-862
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-xj9w-5r6q-x6v4
- https://github.com/openclaw/openclaw/commit/3886b65ef21d02808c1a106fa1f9f69e22f71c32
- https://www.vulncheck.com/advisories/openclaw-remote-code-execution-via-node-scope-gate-bypass
ADP enrichment
No English description supplied.
No references supplied.