Which versions of OpenClaw are affected by CVE-2026-42433?

OpenClaw versions before 2026.4.10 contain an authorization bypass vulnerability that allows low-privileged operators to modify system-wide profile configurations intended for administrator access…. A patch is available.

How to fix or mitigate CVE-2026-42433?

Within 24 hours: Inventory all OpenClaw deployments and identify current versions; confirm any users with operator.write permissions. Within 7 days: Upgrade all OpenClaw instances to version 2026.4.10 or later (vendor patch per GitHub commit fe0f686c). Within 30 days: Review and audit all Matrix profile configuration changes made by operator-level accounts since deployment; implement additional monitoring on profile mutation operations.

OpenClaw CVE-2026-42433

Q: What is the CVSS score of CVE-2026-42433?

CVE-2026-42433 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-27249 HIGH

Missing Authorization (CWE-862)

2026-05-05 VulnCheck

GHSA-7jp6-r74r-995q

Authentication Bypass Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

May 05, 2026 - 12:55 vuln.today

v2 (cvss_changed)

Re-analysis Queued

May 05, 2026 - 12:37 vuln.today

cvss_changed

Severity Changed

May 05, 2026 - 12:37 NVD

MEDIUM HIGH

CVSS changed

May 05, 2026 - 12:37 NVD

6.5 (MEDIUM) 7.1 (HIGH)

Source Code Evidence Fetched

May 05, 2026 - 12:15 vuln.today

Analysis Generated

May 05, 2026 - 12:15 vuln.today

DescriptionCVE.org

OpenClaw before 2026.4.10 contains an authorization bypass vulnerability allowing operator.write message-tool paths to access Matrix profile persistence requiring admin-level authority. Attackers can exploit insufficient access controls to mutate persistent profile configuration through non-owner message-tool runs.

AnalysisAI

Authorization bypass in OpenClaw before 2026.4.10 allows low-privileged authenticated users with operator.write permissions to mutate persistent Matrix profile configurations that should require admin-level authority. Exploitation enables unauthorized modification of system-wide profile settings through message-tool paths, bypassing role-based access controls (CVSS:4.0 7.1 High, VI:H). Vendor patch available via GitHub commit fe0f686c. No confirmed active exploitation or public POC identified at time of analysis, with EPSS data not yet available for this 2026 CVE.

Technical ContextAI

This vulnerability stems from CWE-862 (Missing Authorization), where OpenClaw's role-based access control implementation fails to enforce privilege boundaries between operator.write and admin roles. The affected component involves Matrix protocol profile persistence, suggesting OpenClaw implements Matrix messaging or federation capabilities. The message-tool code paths accessible to operator.write users do not properly validate whether the caller possesses admin-level authority before allowing mutations to persistent profile configurations. The affected product is identified via CPE as cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, indicating all OpenClaw versions prior to the patched release. CVSS:4.0 vector indicates network-accessible (AV:N), low complexity (AC:L), requiring low-level privileges (PR:L) with no user interaction (UI:N), resulting in high integrity impact to vulnerable system (VI:H) with no confidentiality or availability impacts.

RemediationAI

Upgrade to OpenClaw version 2026.4.10 or later, which contains the authorization fix implemented in GitHub commit fe0f686c9228fffcec6de4011da45e69a6e23e54. Patch available from vendor repository at https://github.com/openclaw/openclaw/commit/fe0f686c9228fffcec6de4011da45e69a6e23e54. Organizations unable to immediately upgrade should implement compensating controls: restrict operator.write role assignment to only trusted users who legitimately require admin-equivalent access (reduces attack surface but sacrifices role separation principle), disable Matrix profile persistence features if not operationally required (may impact chat/federation functionality), or implement network-level access controls to limit who can authenticate to OpenClaw services (reduces PR:L attack population but does not eliminate insider threat). Each workaround trades functionality or security model integrity for temporary risk reduction. Consult vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-7jp6-r74r-995q and VulnCheck analysis at https://www.vulncheck.com/advisories/openclaw-unauthorized-matrix-profile-config-persistence-access-via-operator-write-message-tools for deployment-specific guidance.