VulnSocial

CVE-2026-33577Disclosure(openclaw / openclaw)

LOWCVSS 8.6 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing.ts to extend privileges onto paired nodes beyond their authorization level.

openclaw CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories
Weakness type (CWE)
CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openclaw

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
openclaw
Products
openclaw

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-31: 3Technical Details · 2026-03-31: 303-31
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • The Hacker Wire@TheHackerWire
    Disclosure

    🔴 CVE-2026-33577 - Critical OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scope... https://www.thehackerwire.com/vulnerability/CVE-2026-33577/ https://t.co/nKCdsftCbD

    Post summary

    The post announces a critical vulnerability (CVE‑2026‑33577) in OpenClaw’s node pairing approval path that enables low‑privilege operators to grant broader node scope, without mentioning patches, PoCs, or exploits.

    0000068
    163 followersView on X
  • CVEFind.com@CveFindCom
    Disclosure

    [CVE-2026-33577: CRITICAL] OpenClaw has a cybersecurity vulnerability allowing low-privilege operators to approve nodes with broader scopes, potentially extending privileges beyond authorization levels.#cve,CVE-2026-33577,#cybersecurity https://cvefind.com/CVE-2026-33577

    Post summary

    A critical privilege‑escalation vulnerability (CVE‑2026‑33577) in OpenClaw enables low‑privilege operators to extend privileges by approving nodes with broader scopes; no PoC, exploit, or patch is referenced.

    0000057
    617 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-33577 OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nod… https://www.cve.org/CVERecord?id=CVE-2026-33577

    Post summary

    The text announces CVE‑2026‑33577, highlighting an insufficient scope validation flaw in OpenClaw’s node pairing approval path that could be abused by low‑privilege operators, but it provides no evidence of exploits, patches, or active attacks.

    00000127
    56.9K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenclawopenclaw-node.js-

Explore more

Back to dashboardopenclaw CVEsopenclaw vulnerabilities