PT-2026-35807 · Openclaw · Openclaw

Keensecuritylab + 1 · Published 2026-04-09 · Updated 2026-04-28 · CVE-2026-42429

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8

Description A privilege escalation issue exists in the gateway plugin HTTP authentication mechanism. This flaw allows identity-bearing operator.read requests to be widened into runtime operator.write permissions. An attacker can exploit this by sending read-scoped requests through the gateway auth route to obtain unauthorized write access to runtime operations.

Recommendations Update to version 2026.4.8 or later.

Fix

LPE

Incorrect Authorization

Improper Privilege Management

Weakness Enumeration

CWE-863

CWE-269

Related Identifiers

CVE-2026-42429

GHSA-4F8G-77MW-3RXC

Affected Products

Openclaw

References · 8

• https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-4f8g-77mw-3rxc · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4f8g-77mw-3rxc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42429 · Security Note
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/VulmonFeeds/status/2049275861271036293 · Twitter Post
• https://vulncheck.com/advisories/openclaw-privilege-escalation-via-gateway-plugin-http-authentication · Note
• https://twitter.com/CVEnew/status/2049227495111602291 · Twitter Post