CVE Intelligence
Analysis AI-assisted

CVE-2026-41386: OpenClaw - Privilege Escalation via Unbound Bootstrap Setup Codes

CVE-2026-41386 affects OpenClaw versions before 2026.3.22. Bootstrap setup codes used during device pairing are not bound to the device roles and scopes they were intended for, which can allow privilege escalation during first-use pairing. NVD scores it 9.8 (critical) under CVSS 3.1, and no confirmed exploitation appears in the sources consulted.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

CVE-2026-41386 is a privilege escalation weakness in OpenClaw. According to the record, bootstrap setup codes are not bound to the device roles and scopes intended during pairing, so the issue is tied to first-use device pairing. VulnCheck is the CNA, and NVD classifies the weakness as CWE-648.

Impact

  • Per the record, an actor involved in first-use device pairing could gain privileges beyond the role and scope intended for that device.
  • NVD scores the issue 9.8 (critical) with the CVSS 3.1 vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which reflects network reachability, no privileges or user interaction required, and high impact to confidentiality, integrity and availability.
  • The SSVC data in the record marks the issue as automatable with total technical impact.
  • Other scores in the record, from VulnCheck and its disclosure contact, are 9.1.

Affected products and versions

  • Product: OpenClaw (listed in the record as Openclaw Openclaw).
  • Affected range: versions before 2026.3.22.
  • Fix: a commit in the vendor repository is listed as the patch. The corrected version given by the affected range is 2026.3.22.

Exploitation status

  • The CISA KEV catalog does not list this CVE in the record.
  • No confirmed exploitation in the wild appears in the sources consulted.
  • The EPSS probability of 0.00568 is a modelled estimate of exploitation likelihood, not evidence of observed attacks.

Remediation and mitigation

  • Upgrade OpenClaw to 2026.3.22 or later, as indicated by the affected range and the linked patch.
  • Review the vendor GitHub Security Advisory for guidance specific to your deployment.
  • Until the upgrade is done, limit device pairing to trusted administrators and trusted environments, and avoid issuing setup codes to unknown or unverified devices.
  • Review devices paired during the exposure window and verify their assigned roles and scopes.

Detection guidance

  • Audit pairing events and compare the role and scope granted to each newly paired device with what was intended.
  • Alert on pairings that grant broader permissions than the device category normally receives.
  • Correlate new device enrollments with setup code issuance records where logs are available.

Limitations of the available information

  • The record does not describe the technical mechanism in detail, so the exact conditions for exploitation are unknown.
  • Whether workarounds exist for versions before the fix is unknown.
  • The record provides a CWE identifier without a CWE name.
  • Score differences between NVD and VulnCheck were not reconciled beyond what the record lists.

Frequently asked questions

Which OpenClaw versions are affected?

According to the record, OpenClaw versions before 2026.3.22 are affected.

Is this vulnerability being exploited in the wild?

The record shows the CVE is not listed in the CISA KEV catalog, and no confirmed exploitation appears in the sources consulted.

What should administrators do?

Upgrade to 2026.3.22 or later, review recent device pairings and their assigned roles, and limit pairing to trusted contexts until the upgrade is complete.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.