OpenClaw before 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that escalates identity-bearing operator.read requests to runtime operator.write permissions. Attackers can exploit this by sending read-scoped requests through the gateway auth route to gain unauthorized write access to runtime operations.
References
Configurations
History
26 May 2026, 14:16
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) OpenClaw before 2026.4.8 contains a privilege escalation vulnerability in the gateway plugin HTTP authentication mechanism that escalates identity-bearing operator.read requests to runtime operator.write permissions. Attackers can exploit this by sending read-scoped requests through the gateway auth route to gain unauthorized write access to runtime operations. |
30 Apr 2026, 14:06
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:* | |
| First Time |
Openclaw openclaw
Openclaw |
|
| References | () https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5 - Patch | |
| References | () https://github.com/openclaw/openclaw/security/advisories/GHSA-4f8g-77mw-3rxc - Vendor Advisory | |
| References | () https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-gateway-plugin-http-authentication - Third Party Advisory |
28 Apr 2026, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-04-28 19:37
Updated : 2026-05-26 14:16
NVD link : CVE-2026-42429
Mitre link : CVE-2026-42429
CVE.ORG link : CVE-2026-42429
JSON object : View
Products Affected
openclaw
- openclaw
CWE
CWE-863
Incorrect Authorization