OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect. Attackers can bypass pairing requirements to reconnect as operator.admin, gaining unauthorized administrative privileges.
| Vendor | Product | Versions |
|---|---|---|
| openclaw | openclaw | npm/openclaw: <= 2026.3.24 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| open source | openclaw | cert_advisory | 90% |
Updated severity to CRITICAL, marked as actively exploited, and added CVE-2026-35663 as a new tag.
Initial creation
