Which versions of Openclaw are affected by CVE-2026-33577?

OpenClaw versions prior to 2026.3.28 contain a critical authorization bypass that allows unauthenticated attackers to escalate privileges across paired nodes in your infrastructure.. A patch is available.

How to fix or mitigate CVE-2026-33577?

Within 24 hours: Identify all OpenClaw deployments and current versions in your environment. Within 7 days: Upgrade all affected OpenClaw instances to version 2026.3.28 or later; test in non-production first. Within 30 days: Conduct audit of node pairing approvals and verify no unauthorized scope escalations occurred during exposure window.

Openclaw CVE-2026-33577

Q: What is the CVSS score of CVE-2026-33577?

CVE-2026-33577 has a CVSS 4.0 base score of 8.6 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-17433 HIGH

Incorrect Authorization (CWE-863)

2026-03-31 VulnCheck

GHSA-2x4x-cc5g-qmmg

Authentication Bypass Openclaw

8.6

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.6 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 31, 2026 - 14:30 euvd

EUVD-2026-17433

Analysis Generated

Mar 31, 2026 - 14:30 vuln.today

Patch released

Mar 31, 2026 - 14:30 nvd

Patch available

CVE Published

Mar 31, 2026 - 14:10 nvd

HIGH 8.6

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing.ts to extend privileges onto paired nodes beyond their authorization level.

AnalysisAI

Privilege escalation in OpenClaw versions prior to 2026.3.28 enables unauthenticated remote attackers to approve node pairings with unauthorized elevated scopes, bypassing authorization controls through missing callerScopes validation in the node pairing approval mechanism. This vulnerability (CWE-863: Incorrect Authorization) allows attackers to extend privileges onto paired nodes beyond their intended authorization level. CVSS 9.8 Critical with network-accessible attack vector requiring no authentication or user interaction. No public exploit identified at time of analysis, with EPSS data not available for this recent CVE.

Technical ContextAI

OpenClaw is a distributed system management platform implementing node pairing functionality for device authorization and scope management. The vulnerability resides in node-pairing.ts, where the approval workflow fails to validate callerScopes parameters during the pairing approval process. CWE-863 (Incorrect Authorization) indicates a broken access control mechanism where the system fails to properly verify whether an actor has sufficient privileges to perform a security-critical operation. In this case, the node pairing approval path accepts scope elevation requests without validating the requesting operator's authorization level against the target scope being approved. The CVSS vector (AV:N/AC:L/PR:N/UI:N) reveals this is a network-accessible vulnerability requiring no authentication (PR:N), no user interaction, and low attack complexity, making it trivially exploitable by any remote attacker who can reach the node pairing API endpoint. The affected CPE (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) indicates the vulnerability affects the core OpenClaw application across all versions prior to the patched release.

RemediationAI

Immediately upgrade OpenClaw to version 2026.3.28 or later, which contains the fix for insufficient scope validation in the node pairing approval mechanism. The patch is available through the upstream GitHub repository with the specific fix implemented in commit 4d7cc6bb4fac68b5a5fadd1c5a23168281221f34 (https://github.com/openclaw/openclaw/commit/4d7cc6bb4fac68b5a5fadd1c5a23168281221f34). Organizations unable to immediately upgrade should implement compensating controls including: restricting network access to the node pairing API endpoints to trusted administrative networks only via firewall rules or network segmentation, implementing additional authentication layers at the reverse proxy or API gateway level, and enabling comprehensive audit logging for all node pairing approval requests to detect potential exploitation attempts. Review audit logs for suspicious node pairing approvals or scope elevation activities occurring before patch deployment, particularly focusing on pairings granted to low-privilege operators with elevated scopes. Complete remediation guidance and security advisory details are available at https://github.com/openclaw/openclaw/security/advisories/GHSA-2x4x-cc5g-qmmg.