Vulnerability Description
OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator.read to operator.admin. Attackers can exploit this by triggering local reconnection to silently escalate privileges and achieve remote code execution on the node.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.3.25 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/commit/81ebc7e0344fd19c85778e883bad45e2da97Patch
- https://github.com/openclaw/openclaw/security/advisories/GHSA-fqw4-mph7-2vr8Vendor Advisory
- https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-silent-loThird Party Advisory
FAQ
What is CVE-2026-35625?
CVE-2026-35625 is a vulnerability with a CVSS score of 7.8 (HIGH). OpenClaw before 2026.3.25 contains a privilege escalation vulnerability where silent local shared-auth reconnects auto-approve scope-upgrade requests, widening paired device permissions from operator....
How severe is CVE-2026-35625?
CVE-2026-35625 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35625?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.