A critical privilege escalation vulnerability in OpenClaw allows local attackers to gain administrative control and achieve remote code execution.

The application incorrectly uses privileged APIs during local shared-auth reconnects, which auto-approves scope-upgrade requests. This allows an authenticated local user to silently escalate their privileges from an operator.read role to an operator.admin role.

This vulnerability poses a significant risk to organizational infrastructure, as it enables an attacker to move from a restricted local user to a full administrative role on the affected node. With administrative access, the attacker can execute arbitrary code, potentially leading to full system compromise, data theft, or lateral movement within the network. Given the CVSS score of 7.8, this flaw represents a high risk that requires immediate attention to prevent unauthorized administrative escalation.

Immediate Action: Update OpenClaw to version 2026.3.25 or later immediately to incorporate the necessary security fixes.

Proactive Monitoring: Review system and application logs for suspicious local connection events or unauthorized attempts to elevate user roles.

Compensating Controls: Restrict local access to the server or host environment to trusted users only, as the attack vector requires local presence on the system.

Public Exploit Available: Unknown

The ability for a low-privileged user to achieve administrative code execution makes this vulnerability a priority for remediation. Security teams should audit their environment for instances of OpenClaw and apply the 2026.3.25 patch across all affected nodes without delay. Failure to address this flaw leaves systems exposed to potential full administrative takeovers by any user with local access.