Privilege Escalation Vulnerability in OpenClaw by OpenClaw

CVE-2026-41386

What is CVE-2026-41386?

OpenClaw versions prior to 2026.3.22 are susceptible to a privilege escalation vulnerability where bootstrapping setup codes fail to properly bind to designated device roles and scopes during the initial device pairing process. This oversight allows potential attackers to exploit the pairing mechanism, enabling them to gain unauthorized access and escalate permissions beyond what is normally allowed. Promptly upgrading to the patched version is crucial to safeguard against such exploits.

References