Which versions of Openclaw are affected by CVE-2026-35625?

OpenClaw versions prior to 2026.3.25 contain a privilege escalation vulnerability that allows authenticated local users to gain administrative access and execute code on affected nodes during…. A patch is available.

How to fix or mitigate CVE-2026-35625?

Within 24 hours: Identify all OpenClaw deployments and document current versions in use. Within 7 days: Apply vendor patch to OpenClaw 2026.3.25 or later (commit 81ebc7e0344fd19c85778e883bad45e2da972229) to all affected instances, prioritizing systems with multiple local user accounts. Within 30 days: Conduct access reviews to audit local user permissions and restrict unnecessary local access to OpenClaw systems.

Openclaw CVE-2026-35625

Q: What is the CVSS score of CVE-2026-35625?

CVE-2026-35625 has a CVSS 4.0 base score of 8.5 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21108 HIGH

Incorrect Use of Privileged APIs (CWE-648)

2026-04-09 VulnCheck

GHSA-8vgj-c3fx-pprx

RCE Privilege Escalation Openclaw

8.5

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 16, 2026 - 13:52 vuln.today

cvss_changed

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21108

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

Patch released

Apr 09, 2026 - 21:45 nvd

Patch available

CVE Published

Apr 09, 2026 - 21:26 nvd

HIGH 8.5

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently escalate privileges and achieve remote code execution on the node.

AnalysisAI

Privilege escalation in OpenClaw (versions prior to 2026.3.25) enables authenticated local attackers to silently elevate permissions from operator.read to operator.admin during shared-auth reconnection events, achieving remote code execution on affected nodes. The vulnerability exploits auto-approval of scope-upgrade requests in local reconnection flows, requiring low-privilege local access (PR:L) with no user interaction. No public exploit identified at time of analysis. Vendor-released patch available via commit 81ebc7e0344fd19c85778e883bad45e2da972229.

Technical ContextAI

CWE-648 (Incorrect Use of Privileged APIs) stems from shared-authentication reconnection logic failing to validate scope-upgrade requests. Local reconnection triggers silent auto-approval, escalating operator.read permissions to operator.admin without authorization checks. Exploitation chain: trigger local reconnect → auto-approve scope upgrade → execute privileged operations → achieve RCE on node infrastructure. Affects all OpenClaw versions prior to 2026.3.25.

RemediationAI

Vendor-released patch: Upgrade to OpenClaw version 2026.3.25 or later. Apply commit 81ebc7e0344fd19c85778e883bad45e2da972229 from upstream repository if building from source. Organizations unable to immediately patch should restrict local access to OpenClaw nodes, disable shared-authentication reconnection features in configuration files, or implement strict authorization controls for paired devices. Review audit logs for suspicious operator permission escalations from operator.read to operator.admin during reconnection events. Vendor advisory: https://github.com/openclaw/openclaw/security/advisories/GHSA-fqw4-mph7-2vr8. Patch commit details: https://github.com/openclaw/openclaw/commit/81ebc7e0344fd19c85778e883bad45e2da972229. Additional technical analysis: https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-silent-local-shared-auth-reconnect.