GitHub Advisoryadvisory · npm

GHSA-fqw4-mph7-2vr8 OpenClaw: Silent privilege escalation via gateway shared-auth reconnect

CRITICAL Published 2026-03-27 Modified 2026-03-27 Official page ↗
Ecosystem
npm
Packages
openclaw
Severity
Critical
CVSS vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weaknesses
CWE-863
Reviewed
2026-03-27

Affected packages

• npm openclaw: <= 2026.3.24 (no fix yet)

Description

Summary Gateway local shared-auth reconnect silently widens paired device scope from operator.read to operator.admin and reach node RCE Affected Packages / Versions • Package: `openclaw` • Affected versions: `<= 2026.3.24` • First patched version: `2026.3.25` • Latest published npm version at verification time: `2026.3.24` Details Silent local shared-auth reconnects could previously auto-approve `scope-upgrade` requests and widen a paired device from `operator.read` to `operator.admin`. Commit `81ebc7e0344fd19c85778e883bad45e2da972229` blocks silent reconnect scope upgrades so widened scopes require an explicit pairing approval instead of an implicit local reconnect path. Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `81ebc7e0344fd19c85778e883bad45e2da972229`. Fix Commit(s) • `81ebc7e0344fd19c85778e883bad45e2da972229`

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References