PT-2026-35807 · Openclaw · Openclaw

Keensecuritylab + 1 · CVE-2026-42429 · Published 2026-04-09 · Updated 2026-04-28

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8

Description A privilege escalation issue exists in the gateway plugin HTTP authentication mechanism. This flaw allows identity-bearing operator.read requests to be widened into runtime operator.write permissions. An attacker can exploit this by sending read-scoped requests through the gateway auth route to obtain unauthorized write access to runtime operations.

Recommendations Update to version 2026.4.8 or later.

Exploit

Fix

LPE

Improper Privilege Management

Incorrect Authorization

Weakness Enumeration

CWE-269

CWE-863

Related Identifiers

CVE-2026-42429

GHSA-4F8G-77MW-3RXC

Affected Products

Openclaw

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42429.json · Exploit
• https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-4f8g-77mw-3rxc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42429 · Security Note
• https://osv.dev/vulnerability/CVE-2026-42429 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4f8g-77mw-3rxc · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-gateway-plugin-http-authentication · Note
• https://twitter.com/VulmonFeeds/status/2049275861271036293 · Twitter Post
• https://twitter.com/CVEnew/status/2049227495111602291 · Twitter Post