Which versions of OpenClaw are affected by CVE-2026-41386?

OpenClaw versions prior to 2026.3.22 contain a critical privilege escalation vulnerability in the device pairing process that allows unauthenticated remote attackers to bypass role restrictions…. A patch is available.

How to fix or mitigate CVE-2026-41386?

Within 24 hours: Identify all OpenClaw deployments and document current versions; pause new device onboarding until patch is applied. Within 7 days: Apply vendor patch to OpenClaw version 2026.3.22 or later to all affected devices; prioritize new/recently deployed instances. Within 30 days: Complete full inventory audit of all OpenClaw devices to verify patch deployment; review access logs for unauthorized privilege escalation attempts during the vulnerability window.

OpenClaw CVE-2026-41386

Q: What is the CVSS score of CVE-2026-41386?

CVE-2026-41386 has a CVSS 4.0 base score of 9.1 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-26095 CRITICAL

Incorrect Use of Privileged APIs (CWE-648)

2026-04-28 VulnCheck

GHSA-gg9v-mgcp-v6m7

Privilege Escalation Openclaw

9.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

9.1 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Re-analysis Queued

Apr 28, 2026 - 20:23 vuln.today

cvss_changed

Analysis Generated

Apr 28, 2026 - 20:03 vuln.today

EUVD ID Assigned

Apr 28, 2026 - 19:30 euvd

EUVD-2026-26095

Analysis Generated

Apr 28, 2026 - 19:30 vuln.today

Patch released

Apr 28, 2026 - 19:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 18:09 nvd

CRITICAL 9.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can exploit this during first-use device pairing to escalate privileges beyond their intended role and scope.

AnalysisAI

Privilege escalation in OpenClaw allows remote unauthenticated attackers to elevate privileges beyond intended device roles during first-use pairing. The vulnerability stems from bootstrap setup codes lacking proper binding to device roles and scopes, enabling attackers to exploit the pairing process with low complexity and no user interaction. VulnCheck reported this issue, and a vendor patch is available as of 2026.3.22. While no active exploitation has been confirmed (not in CISA KEV), the network attack vector (AV:N) and absence of authentication requirements (PR:N) create significant exposure for organizations deploying new OpenClaw instances.

Technical ContextAI

OpenClaw is an open-source game engine project. This vulnerability exploits CWE-648 (Incorrect Use of Privileged APIs), specifically in the device pairing and bootstrap initialization code. During first-use device pairing, bootstrap setup codes are generated but not cryptographically or logically bound to the intended device role (e.g., admin, user, guest) or operational scope (e.g., network segments, resource access). The CVSS vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N indicates network-accessible exploitation with low attack complexity but requiring specific attack timing (AT:P), suggesting the vulnerability window exists during the pairing phase. The vulnerability affects all OpenClaw versions prior to 2026.3.22 as indicated by the CPE string cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, with the upper bound defined by the patch release date.

RemediationAI

Upgrade immediately to OpenClaw version 2026.3.22 or later, which contains the fix implemented in commit a600c72ed7d0045a27f58bf031d2b36ecb0141c9. Review the vendor security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-gg9v-mgcp-v6m7 for complete upgrade guidance. For environments where immediate patching is not feasible, implement network segmentation to restrict access to OpenClaw instances during initial setup and pairing operations, limiting exposure to trusted management networks only. Re-pair all devices deployed before patching if the initial pairing occurred during the vulnerable window, as attackers may have already escalated privileges during first-use setup. Note that network restrictions will limit operational flexibility and may complicate legitimate remote deployments, but this compensating control significantly reduces the AV:N attack surface until patches can be applied.