Executive brief
OpenClaw Gateway is a device management system that controls network infrastructure permissions. A vulnerability in the device approval mechanism allows a lower-privileged operator to approve new devices with elevated administrative privileges, bypassing intended access controls and potentially enabling remote code execution on the infrastructure.
Technical details
The device.pair.approve method in OpenClaw Gateway contains an improper privilege management vulnerability (CWE-269) that fails to validate whether an approver's assigned operator scope covers the broader scope being requested for a new device. An authenticated operator with operator.pairing privileges can approve pending device requests with operator.admin scope, escalating their own effective privileges. The vulnerability requires valid authentication but no user interaction; the attacker can directly invoke the vulnerable API method with crafted scope parameters. Successful exploitation allows an authenticated user to gain operator.admin privileges and achieve remote code execution on Node infrastructure. The fix (v2026.3.22+) threads caller scopes into the approval logic and rejects requested scopes exceeding the approver's held scope.
Affected products
- OpenClaw Gateway < 2026.3.22
Timeline
- 2026-03-24: disclosed
- 2026-03-22: patched: Fix released in v2026.3.22
- 2026-04-10: advisory: Duplicate advisory GHSA-r3v5-2grc-429h withdrawn; original advisory GHSA-hf68-49fm-59cq maintained