EUVD-2026-28170Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
4DescriptionCVE.org
OpenClaw before 2026.4.10 contains an insufficient access control vulnerability in Nostr plugin HTTP profile routes that allows operators with write permissions to persist profile configuration without requiring admin authority. Attackers with operator.write scope can modify Nostr profile settings through unprotected mutation endpoints to gain unauthorized configuration persistence.
AnalysisAI
OpenClaw before version 2026.4.10 allows operators with write permissions to persist Nostr profile configuration without requiring admin authority through unprotected HTTP mutation endpoints. Attackers holding the operator.write scope can modify profile settings via PUT and POST routes that should require operator.admin scope, enabling unauthorized configuration changes. This is a privilege escalation vulnerability affecting the Nostr plugin HTTP API layer.
Technical ContextAI
OpenClaw's Nostr plugin exposes HTTP endpoints for managing Nostr protocol profiles at routes like /api/channels/nostr/default/profile and /api/channels/nostr/default/profile/import. The vulnerability stems from insufficient authorization checks (CWE-862: Missing Authorization) on mutation operations. The plugin uses a scope-based access control system with granular permissions (operator.read, operator.write, operator.admin). The vulnerable code path allowed any caller with operator.write scope to invoke profile update and import functions without validating that the requesting user also possessed operator.admin scope. The fix implements explicit scope validation by adding gatewayRuntimeScopeSurface checks that enforce operator.admin requirement before executing ProfileUpdateSchema mutations, and adds test cases validating that requests without operator.admin scope receive 403 Forbidden responses with error message 'missing scope: operator.admin'.
RemediationAI
Upgrade OpenClaw to version 2026.4.10 or later; npm packages 2026.4.14 and newer include the fix. The fix can be deployed by running 'npm install openclaw@latest' or pinning to 'npm install openclaw@2026.4.10'. The vulnerability was resolved by commit 6517c700de9bb0ee11b41ab625ef3b63d01b6083 (PR #63553), which adds explicit operator.admin scope validation to profile mutation routes. Until patched, organizations can implement compensating controls by restricting which users or service accounts are granted the operator.write scope, and by implementing additional authorization layers at the gateway level to prevent operator.write accounts from accessing profile mutation endpoints. However, these workarounds do not fully remediate the vulnerability and should be considered temporary; upgrading is the definitive fix. Refer to https://github.com/openclaw/openclaw/security/advisories/GHSA-f3h5-h452-vp3j for the official advisory.
Auth bypass in OpenClaw voice-call extension before 2026.2.1. EPSS 0.68%. PoC and patch available.
Privilege escalation in OpenClaw (pre-2026.3.28) allows unauthenticated remote attackers to gain administrative access b
OpenClaw versions 2026.2.22 through 2026.2.24 contain a privilege escalation vulnerability that allows authenticated att
An authorization mismatch vulnerability in OpenClaw versions prior to 2026.3.1 allows authenticated users with operator.
OpenClaw versions prior to 2026.1.29 automatically establish WebSocket connections to attacker-controlled gateway URLs e
Path traversal in OpenClaw through version 2026.3.23 enables unauthenticated remote attackers to read arbitrary files in
OpenClaw sandbox browser functionality launches x11vnc for noVNC observer sessions without requiring authentication, all
OpenClaw versions before 2026.2.26 allow authenticated attackers to write arbitrary files outside the workspace director
OpenClaw versions prior to 2026.2.22 contain a shell environment variable injection vulnerability in the system.run func
OpenClaw versions prior to 2026.2.22 contain a resource exhaustion vulnerability where the application fails to consiste
OpenClaw versions prior to 2026.3.1 contain a sandbox escape vulnerability that allows authenticated attackers with low
OpenClaw versions 2026.1.30 and below fail to validate Telegram webhook secret tokens when `channels.telegram.webhookSec
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today