PT-2026-32307 · Npm · Openclaw

Published 2026-04-03 · Updated 2026-04-03

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Bootstrap setup codes were not bound to the intended device role and scopes, allowing first-use privilege escalation during pairing.

Current Maintainer Triage

• Status: open
• Normalized severity: high
• Assessment: Real first-use bootstrap privilege-escalation bug fixed and shipped in v2026.3.22+, so keep open for publication with current severity.

Affected Packages / Versions

• Package: openclaw (npm)
• Latest published npm version: 2026.3.31
• Vulnerable version range: <=2026.3.13-1
• Patched versions: >= 2026.3.22
• First stable tag containing the fix: v2026.3.22

Fix Commit(s)

• a600c72ed7d0045a27f58bf031d2b36ecb0141c9 — 2026-03-22T23:57:15-07:00

OpenClaw thanks @tdjackey for reporting.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-648

CWE-269

Related Identifiers

GHSA-GG9V-MGCP-V6M7

Affected Products

Openclaw

References · 6

• https://osv.dev/vulnerability/GHSA-gg9v-mgcp-v6m7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-41386 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-gg9v-mgcp-v6m7 · Note
• https://github.com/openclaw/openclaw/commit/a600c72ed7d0045a27f58bf031d2b36ecb0141c9 · Note
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-unbound-bootstrap-setup-codes · Note