{"id":"EUVD-2026-17433","enisaUuid":"36595b0e-8906-34d5-97a0-681b03d81d60","description":"OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing.ts to extend privileges onto paired nodes beyond their authorization level.","datePublished":"Mar 31, 2026, 2:10:31 PM","dateUpdated":"Sep 24, 2026, 2:17:22 PM","baseScore":8.6,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x4x-cc5g-qmmg\nhttps://github.com/openclaw/openclaw/commit/4d7cc6bb4fac68b5a5fadd1c5a23168281221f34\nhttps://www.vulncheck.com/advisories/openclaw-insufficient-scope-validation-in-node-pair-approve\n","aliases":"CVE-2026-33577\n","assigner":"VulnCheck","epss":0.39,"enisaIdProduct":[{"id":"5bdf1f6d-dd2c-3f4f-9176-737d01ff7506","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.3.28"}],"enisaIdVendor":[{"id":"423a504b-c437-3ea8-91b2-5d4185f38e3c","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"ca712f3a-1c90-3756-aa1d-4a0a14b0c927","vulnerability":{"id":"CVE-2026-33577","description":"OpenClaw before 2026.3.28 contains an insufficient scope validation vulnerability in the node pairing approval path that allows low-privilege operators to approve nodes with broader scopes. Attackers can exploit missing callerScopes validation in node-pairing.ts to extend privileges onto paired nodes beyond their authorization level.","datePublished":"Mar 31, 2026, 2:10:31 PM","dateUpdated":"Sep 24, 2026, 2:17:22 PM","status":"PUBLISHED","baseScore":8.6,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x4x-cc5g-qmmg\nhttps://github.com/openclaw/openclaw/commit/4d7cc6bb4fac68b5a5fadd1c5a23168281221f34\nhttps://www.vulncheck.com/advisories/openclaw-insufficient-scope-validation-in-node-pair-approve\n","enisa_id":"EUVD-2026-17433\n","assigner":"VulnCheck","epss":0.39,"dataProcessed":"Oct 29, 2026, 7:17:53 AM","vulnerabilityProduct":[{"id":"b47c51ab-cb6c-381d-8ad4-669f63f6f307","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.3.28"}],"vulnerabilityVendor":[{"id":"9ce56bb0-95d6-3da8-af93-bc2c7fc67bc9","vendor":{"name":"OpenClaw"}}]}},{"id":"f66ba199-6b2b-3053-8ecc-8b3746381e21","vulnerability":{"id":"GHSA-2x4x-cc5g-qmmg","description":"OpenClaw: node.pair.approve missing callerScopes validation allows low-privilege operator to approve malicious nodes","datePublished":"Apr 1, 2026, 12:00:19 AM","dateUpdated":"Apr 6, 2026, 5:34:40 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-2x4x-cc5g-qmmg\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-33577\nhttps://github.com/openclaw/openclaw/commit/4d7cc6bb4fac68b5a5fadd1c5a23168281221f34\nhttps://github.com/openclaw/openclaw\nhttps://www.vulncheck.com/advisories/openclaw-insufficient-scope-validation-in-node-pair-approve\n","enisa_id":"EUVD-2026-17433\n","aliases":"GHSA-2x4x-cc5g-qmmg\nCVE-2026-33577\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:54:31 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"e7eac37e-ddea-35f5-ad30-9f00c3fda5fb","advisory":{"id":"WID-SEC-W-2026-0930","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen oder andere, nicht näher spezifizierte Angriffe durchzuführen.","datePublished":"Mar 30, 2026, 10:00:00 PM","dateUpdated":"Apr 28, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0930.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-0930\n","aliases":"CVE-2026-33576\nCVE-2026-33577\nCVE-2026-33578\nCVE-2026-33579\nCVE-2026-33580\nCVE-2026-33581\nCVE-2026-34503\nCVE-2026-34504\nCVE-2026-41303\nCVE-2026-41332\nCVE-2026-41342\nCVE-2026-41344\nCVE-2026-41361\nCVE-2026-41367\nCVE-2026-41368\nCVE-2026-41371\nCVE-2026-41380\nCVE-2026-41395\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"916871f7-7abb-33b2-a5b7-8fab819bbc05","product":{"name":"2026.3.28","vendor":{"name":"open source"}}},{"id":"dd101b2f-0984-30e9-8e6c-624c033416de","product":{"name":"OpenClaw","vendor":{"name":"n/a"}}}]}}]}