CVE-2026-35625

Summary

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently escalate privileges and achieve remote code execution on the node.

Affected Software

VendorProductVersion RangeStatus
OpenClawOpenClaw0 < 2026.3.25affected
OpenClawOpenClaw2026.3.25unaffected

Weaknesses

  • CWE-648: CWE-648: Incorrect Use of Privileged APIs

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References