| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | < 2026.3.28 | 2026.3.28 |
| openclaw | < 2026.3.28 | 2026.3.28 |
The node pairing approval path did not consistently enforce that the approving caller already held every scope requested by the node.
A lower-privileged operator could approve a pending node request for broader scopes and extend privileges onto the paired node.
src/infra/node-pairing.ts, src/gateway/server-methods/nodes.ts
<= 2026.3.24>= 2026.3.282026.3.28 contains the fix.Fixed by commit 4d7cc6bb4f (gateway: restrict node pairing approvals).
OpenClaw thanks @AntAISecurityLab for reporting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free