CVE-2026-32922 CRITICAL

CVE-2026-32922: OpenClaw < 2026.3.11 - Privilege Escalation via Unvalidated Scope in device.token.rotate

Vendor Openclaw
Product OpenClaw
Weakness CWE-266
Published March 29, 2026
Last update March 30, 2026
View on NVD All CVEs

CVSS base score

9.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes by failing to constrain newly minted scopes to the caller's current scope set. Attackers can obtain operator.admin tokens for paired devices and achieve remote code execution on connected nodes via system.run or gain unauthorized gateway-admin access.

Key dates

02Disclosure timeline

March 29, 2026 CVE published
March 30, 2026 Record updated