CVE-2026-42426 - Vulnerability Analysis

Overview

OpenClaw < 2026.4.8 contains an improper authorization vulnerability caused by node.pair.approve method accepting operator.write scope instead of operator.pairing scope, letting attackers with operator.write permissions bypass pairing approval restrictions to access exec-capable nodes.

Severity & Score

Impact

Attackers with operator.write permissions can gain unauthorized access to exec-capable nodes, potentially leading to unauthorized command execution.

Mitigation

Update to version 2026.4.8 or later.

References

• https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5
• https://github.com/openclaw/openclaw/security/advisories/GHSA-67mf-f936-ppxf
• https://www.vulncheck.com/advisories/openclaw-improper-authorization-in-node-pair-approve-via-operator-write-scope

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner