CVE-2026-35625
CVE-2026-35625 · OpenClaw < 2026.3.25 - Privilege Escalation via Silent Local Shared-Auth Reconnect
This page contains facts from public vulnerability sources. Check the original advisory before updating.
OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently escalate privileges and achieve remote code execution on the node.
CVSS 8.5 · High · EPSS 0.2% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
Original sources
- https://github.com/openclaw/openclaw/security/advisories/GHSA-fqw4-mph7-2vr8
- https://github.com/openclaw/openclaw/commit/81ebc7e0344fd19c85778e883bad45e2da972229
- https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-silent-local-shared-auth-reconnect
- https://nvd.nist.gov/vuln/detail/CVE-2026-35625