Executive brief
OpenClaw is an AI automation platform that uses node pairing to connect distributed agents and execute tasks. The node pairing approval mechanism failed to properly validate that an operator had all required permissions before granting broader access to new nodes, allowing low-privilege operators to escalate their own and paired nodes' permissions beyond their authorization level.
Technical details
OpenClaw's node.pair.approve function, implemented in src/infra/node-pairing.ts and src/gateway/server-methods/nodes.ts, failed to consistently enforce callerScopes validation. The vulnerability (CWE-863: Incorrect Authorization) allowed a low-privilege operator to approve a pending node pairing request even when the node requested scopes that the approving operator did not possess. An authenticated operator with limited permissions could exploit this to pair nodes with elevated scopes, effectively extending their own privileges and those of the paired node. The vulnerability required prior authentication but no user interaction. The issue was patched in version 2026.3.28 (commit 4d7cc6bb4f), which implements scope restriction checks in the gateway approval path.
Affected products
- OpenClaw OpenClaw <= 2026.3.24
Timeline
- 2026-04-01: disclosed: Advisory published
- 2026-03-27: patched: Fix commit 4d7cc6bb4f merged
- 2026-03-31: other: CVE-2026-33577 published to NVD