Which versions of OpenClaw are affected by CVE-2026-41378?

OpenClaw gateway versions before 2026.3.31 contain a remote code execution vulnerability that allows paired nodes with low-privilege credentials to execute arbitrary code on the gateway through…. A patch is available.

How to fix or mitigate CVE-2026-41378?

Within 24 hours: Identify all OpenClaw gateway instances and document current versions in use. Within 7 days: Upgrade all OpenClaw gateways to version 2026.3.31 or later. Within 30 days: Audit paired node credentials and implement network segmentation to restrict node-to-gateway communication to trusted infrastructure only.

OpenClaw CVE-2026-41378

Q: What is the CVSS score of CVE-2026-41378?

CVE-2026-41378 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-26087 HIGH

Missing Authorization (CWE-862)

2026-04-28 VulnCheck

GHSA-gjm7-hw8f-73rq

Authentication Bypass Privilege Escalation RCE Openclaw

7.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 28, 2026 - 20:23 vuln.today

cvss_changed

Analysis Generated

Apr 28, 2026 - 20:02 vuln.today

CVSS changed

Apr 28, 2026 - 19:52 NVD

8.8 (HIGH) 7.7 (HIGH)

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26087

Analysis Generated

Apr 28, 2026 - 19:30 vuln.today

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:09 nvd

HIGH 7.7

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted gateway-side tool access. Attackers with trusted paired node credentials can escalate privileges by leveraging unrestricted agent.request dispatch to achieve remote code execution on the gateway.

AnalysisAI

Remote code execution in OpenClaw gateway versions before 2026.3.31 allows attackers with trusted paired node credentials (role=node) to escalate privileges and execute arbitrary code on the gateway by abusing unrestricted agent.request dispatch functionality. The vulnerability stems from insufficient access controls on node.event agent requests, enabling low-privilege paired nodes to invoke gateway-side tools without restriction. EPSS exploitation probability and KEV status not yet available for this recently disclosed vulnerability, but a vendor patch and exploit details are publicly documented.

Technical ContextAI

OpenClaw is a distributed automation or orchestration platform that operates on a gateway-controller architecture with paired nodes communicating via event-based agent requests. The vulnerability (CWE-862: Missing Authorization) exists in the node.event agent request handling mechanism prior to version 2026.3.31. Paired nodes with role=node status are intended to have limited capabilities, but the gateway fails to properly validate authorization when processing agent.request dispatch commands. This authorization bypass allows low-privilege nodes to invoke gateway-side tools and functions that should be restricted to higher privilege contexts. The CVSS 4.0 vector indicates network-accessible attack requiring low privileges (PR:L) and attack complexity with present conditions (AT:P), resulting in complete compromise of gateway confidentiality, integrity, and availability (VC:H/VI:H/VA:H) with no impact to subsequent systems (SC:N/SI:N/SA:N).

RemediationAI

Upgrade immediately to OpenClaw version 2026.3.31 or later, which contains authorization fixes for node.event agent request handling as detailed in commit a77928b1087e90f2a8903f8e5aca6dec9237ac62 available at https://github.com/openclaw/openclaw/commit/a77928b1087e90f2a8903f8e5aca6dec9237ac62. If immediate patching is not feasible, implement compensating controls: disable or remove all paired nodes with role=node until patch deployment, restrict network access to the gateway's node.event endpoint to only trusted IP ranges using firewall rules (noting this reduces functionality and requires maintaining IP allowlists), and audit existing paired node credentials for unauthorized entries or compromised accounts. These workarounds significantly limit OpenClaw's distributed capabilities and should be considered temporary measures only. Review gateway logs for suspicious agent.request patterns from paired nodes prior to patching to identify potential exploitation attempts.