What is the CVSS score of CVE-2026-28473?

CVE-2026-28473 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-28473?

OpenClaw versions before 2026.2.2 allow users with basic operator permissions to illegally approve or deny critical execution requests, bypassing intended authorization controls.. A patch is available.

How to fix or mitigate CVE-2026-28473?

Within 24 hours: Identify all OpenClaw deployments and their current versions; notify relevant teams that approval workflows may be compromised. Within 7 days: Test and deploy vendor patch 2026.2.2 to all affected instances in a staged rollout. Within 30 days: Audit all approval decisions made in the past 90 days for suspicious activity and validate approval logs against change records.

Openclaw CVE-2026-28473

HIGH

Incorrect Authorization (CWE-863)

2026-03-05 disclosure@vulncheck.com

GHSA-mqpw-46fh-299h

Authentication Bypass Openclaw

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:06 vuln.today

Patch released

Mar 11, 2026 - 16:18 nvd

Patch available

CVE Published

Mar 05, 2026 - 22:16 nvd

HIGH 8.1

DescriptionCVE.org

OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by sending the /approve chat command. The /approve command path invokes exec.approval.resolve through an internal privileged gateway client, bypassing the operator.approvals permission check that protects direct RPC calls.

AnalysisAI

OpenClaw prior to version 2026.2.2 allows authenticated users with operator.write scope to bypass approval controls and resolve execution requests through a chat command that circumvents authorization checks. An attacker with this scope can approve or deny exec approval requests without having the required operator.approvals permission, effectively gaining unauthorized approval authority. A patch is available for affected installations.

Technical ContextAI

Classified as CWE-863 (Incorrect Authorization). Affects Openclaw. OpenClaw versions prior to 2026.2.2 contain an authorization bypass vulnerability where clients with operator.write scope can approve or deny exec approval requests by sending the /approve chat command. The /approve command path invokes exec.approval.resolve through an internal privileged gateway client, bypassing the operator.approvals permission check that protects direct RPC calls.