OpenClaw: node.pair.approve missing callerScopes validation allows low-privilege operator to approve malicious nodes

高 8.1CVE-2026-33577 · GHSA-2x4x-cc5g-qmmg · 31/03/2026 公開 · 24/07/2026 更新

要点

CVE-2026-33577 は openclaw (openclaw), openclaw に影響する深刻度「高」 (CVSS 8.1) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.39%（全脆弱性の 32.8% より高い）。
対処：2026.3.28 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openclaw openclaw	`< 2026.3.28`	`2026.3.28`
openclaw npm	`< 2026.3.28`	`2026.3.28`

概要

Summary

The node pairing approval path did not consistently enforce that the approving caller already held every scope requested by the node.

Impact

A lower-privileged operator could approve a pending node request for broader scopes and extend privileges onto the paired node.

Affected Component

src/infra/node-pairing.ts, src/gateway/server-methods/nodes.ts

Fixed Versions

Affected: <= 2026.3.24
Patched: >= 2026.3.28
Latest stable 2026.3.28 contains the fix.

Fix

Fixed by commit 4d7cc6bb4f (gateway: restrict node pairing approvals).

OpenClaw thanks @AntAISecurityLab for reporting.

NVD の説明

OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing.ts to extend privileges onto paired nodes beyond their authorization level.