Executive brief
OpenClaw is a local assistant application that manages device pairing operations. A misconfiguration in access controls allows users with basic write permissions to approve new device pairings that should require higher administrative privileges. An attacker with limited local access could exploit this to pair unauthorized devices to the system without proper authorization.
Technical details
The vulnerability stems from improper privilege management (CWE-269, CWE-863) where the `node.pair.approve` endpoint was incorrectly placed in the `operator.write` scope instead of the narrower `operator.pairing` scope with admin requirement for exec-capable nodes. This allows unprivileged users with write permissions to approve device pairing operations that should be restricted. The attack requires local access to the OpenClaw application but does not require additional user interaction. An attacker can approve arbitrary device pairings, effectively escalating their privileges and potentially gaining control over executive-capable nodes. The vulnerability is patched in version 2026.4.8 (commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5).
Affected products
- OpenClaw OpenClaw <= v2026.04.01
Timeline
- 2026-04-09: disclosed
- 2026-04-08: patched: Fixed on main; version 2026.4.8 released