Which versions of Openclaw are affected by CVE-2026-32987?

OpenClaw versions before 2026.3.13 contain a critical authentication bypass vulnerability allowing unauthenticated attackers to escalate privileges to operator.admin during device pairing through…. A patch is available.

How to fix or mitigate CVE-2026-32987?

Within 24 hours: Identify all OpenClaw instances in production and document current versions via inventory systems. Within 7 days: Apply vendor patch to upgrade all OpenClaw deployments to version 2026.3.13 or later, prioritizing internet-facing or externally-accessible pairing endpoints. Within 30 days: Conduct security audit of device pairing logs to detect exploitation attempts and verify all enrolled devices have legitimate administrative scope assignments.

Openclaw CVE-2026-32987

Q: What is the CVSS score of CVE-2026-32987?

CVE-2026-32987 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17022 CRITICAL

Authentication Bypass by Capture-replay (CWE-294)

2026-03-29 VulnCheck

Privilege Escalation Openclaw

9.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 29, 2026 - 13:15 euvd

EUVD-2026-17022

Analysis Generated

Mar 29, 2026 - 13:15 vuln.today

Patch released

Mar 29, 2026 - 13:15 nvd

Patch available

CVE Published

Mar 29, 2026 - 12:44 nvd

CRITICAL 9.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

9 npm packages depend on openclaw (5 direct, 4 indirect)

Ecosystem-wide dependent count for version 2026.3.13.

DescriptionCVE.org

OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts. Attackers can verify a valid bootstrap code multiple times before approval to escalate pending pairing scopes, including privilege escalation to operator.admin.

AnalysisAI

Bootstrap setup code replay in OpenClaw before 2026.3.13 enables unauthenticated remote attackers to escalate privileges to operator.admin during device pairing. The vulnerability (CWE-294: Capture-replay) in src/infra/device-bootstrap.ts permits multiple verification attempts of valid bootstrap codes before approval, allowing escalation of pending pairing scopes. CVSS 9.3 (Critical) reflects network-accessible attack with low complexity and no user interaction required. EPSS data unavailable; no public exploit identified at time of analysis. Vendor-released patch available via GitHub commit 1803d16d.

Technical ContextAI

This vulnerability affects the OpenClaw device bootstrap and pairing infrastructure (cpe:2.3:a:openclaw:openclaw). The flaw is classified as CWE-294 (Authentication Bypass by Capture-replay), a critical authentication weakness where valid credentials or tokens can be intercepted and reused. In OpenClaw's device pairing workflow implemented in src/infra/device-bootstrap.ts, the bootstrap setup code verification mechanism lacks proper replay protection or nonce-based validation. The CVSS 4.0 vector (AV:N/AC:L/PR:N) indicates this is a network-accessible vulnerability requiring no authentication or complex conditions, making it exploitable during the device enrollment phase when bootstrap codes are exchanged between devices and the management platform. The absence of proper state management or one-time-use enforcement for bootstrap codes creates a window where attackers can capture legitimate codes and replay them to gain unauthorized privileges.

RemediationAI

Upgrade immediately to OpenClaw version 2026.3.13 or later to eliminate the bootstrap code replay vulnerability. Vendor-released patch available via commit 1803d16d5cec970c54b0e1ac46b31b1cbade335c at https://github.com/openclaw/openclaw/commit/1803d16d5cec970c54b0e1ac46b31b1cbade335c which implements proper replay protection for device pairing verification. Organizations unable to immediately upgrade should implement network-level controls to restrict access to device pairing endpoints, monitor for multiple bootstrap code verification attempts from the same source, invalidate all pending device pairing requests and reissue bootstrap codes, and audit recent device enrollments for unauthorized privilege escalations to operator.admin. Consult the official security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-63f5-hhc7-cx6p for additional vendor guidance and mitigation strategies.