CVE-2026-32975General(openclaw / openclaw)

🚨 Critical CVEs Today: OpenClaw Platform (CVSS 9.8-9.9) Affected: OpenClaw Platform OpenClaw components expose multiple high-severity flaws spanning privilege escalation, authorization bypass, and pairing verification risks. - CVE-2026-32922 (CVSS 9.9) OpenClaw before 2026.3.11 contains a privilege escalation in device.token.rotate that can let callers with operator.pairing scope mint tokens with broader scopes; attackers can obtain operator.admin tokens for paired devices and achieve remote code execution on connected nodes via http://system.run or gain unauthorized gateway-admin access. Affected versions: before 2026.3.11. - CVE-2026-32924 (CVSS 9.8) OpenClaw before 2026.3.12 contains an authorization bypass vulnerability where Feishu reaction events with omitted chat_type are misclassified as p2p conversations instead of group chats, enabling bypass of groupAllowFrom and requireMention protections in group chat reaction-derived events. Affected versions: before 2026.3.12. - CVE-2026-32973 (CVSS 9.8) OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob matching that overmatches on POSIX paths; attackers can exploit the ? wildcard matching across path segments to execute commands or paths not intended by operators. Affected versions: before 2026.3.11. - CVE-2026-32975 (CVSS 9.8) OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers; attackers can create groups with identical names to allowlisted groups to bypass channel authorization and route messages from unintended groups to the agent. Affected versions: before 2026.3.12. - CVE-2026-32987 (CVSS 9.8) OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts; attackers can verify a valid bootstrap code multiple times before approval to escalate pending pairing scopes, including privilege escalation to operator.admin. Affected versions: before 2026.3.13. 🛠️ Action • Patch/upgrade to fixed OpenClaw versions 2026.3.11+ for CVE-2026-32922 and CVE-2026-32973, 2026.3.12+ for CVE-2026-32924 and CVE-2026-32975, and 2026.3.13+ for CVE-2026-32987. • Prioritize internet-facing instances and edge appliances first. • If no fix yet appears for any CVE, apply vendor-murnished mitigations and reduce exposure (disable feature/module, restrict access). • Add detections for exploitation patterns (token-rotation misuse, reaction-event anomalies, unusual path-matching behaviors, and replay attempts in pairing flows). • Hunt for indicators around the affected services during disclosure-to-now window (logs, EDR, WAF). • Validate remediation (version checks, config verification) and monitor for reversion

[BNN SECURITY] 🔒 CVSS 9.9 THE NIGHT BEFORE CLAWCON TOKYO Four new OpenClaw CVEs disclosed today — on top of this morning's sandbox escape batch. Seven total on a single Sunday. March: 70+. • CVE-2026-32922 (9.9 CRITICAL): Rotate a token, get admin. From there: RCE on connected nodes or full gateway takeover. Affects all versions before 2026.3.11. • CVE-2026-32975 (9.8 CRITICAL): No-auth channel bypass via group name matching. Attackers create a group with the same name as an allowlisted one. No credentials needed. • CVE-2026-32972 (HIGH): Operator→admin privilege escalation via browser profile management routes. • CVE-2026-32978 (HIGH): You approve command A. Command B runs. TOCTOU-class bypass in the human-in-the-loop approval mechanism — the same mechanism plugin approval hooks (shipped yesterday in v2026.3.28) were built to strengthen. THE ONE THAT MATTERS CVE-32978 is the story within the story. The approval flow that operators rely on as a last line of defense has a swap window between display and execution. You see "list files." You click approve. "Delete database" runs. It's a time-of-check-to-time-of-use race condition in the trust boundary between human and agent. This is the same class of vulnerability that makes autonomous agent execution dangerous — and it was sitting in the manual approval path that's supposed to be the safety net. PATCH STATUS All four patched in v2026.3.11+. Current release: v2026.3.28. If you updated, you're covered. If you haven't updated and you're running a self-hosted gateway with node connections: patch tonight. Not tomorrow. Tonight. ClawCon Tokyo opens in hours. The timing is notable but not the point. The point is that the approval mechanism — the thing you trust when you don't trust the agent — had a hole in it. 📎 Via @thehackerwire @redpacketsecurity #BNN #OpenClaw #CVE #Security #ClawConTokyo

CVE-2026-32975 OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group iden… https://www.cve.org/CVERecord?id=CVE-2026-32975

🔴 CVE-2026-32975 - Critical OpenClaw before 2026.3.12 contains a weak authorization vulnerability in Zalouser allowlist mode that matches mutable group display names instead of stable group identifiers. Attackers ca... https://www.thehackerwire.com/vulnerability/CVE-2026-32975/ https://t.co/vhUhIryQxO

[CVE-2026-32975: CRITICAL] Weak authorization vulnerability in OpenClaw (pre-2026.3.12) allows attackers to bypass channel authorization by creating groups with identical names to allowlisted ones. #cybersec...#cve,CVE-2026-32975,#cybersecurity https://cvefind.com/CVE-2026-32975