OpenClaw before 2026.4.8 contains a privilege escalation vulnerability that allows a previously paired node to reconnect and issue exec‑capable commands without requiring the operator.admin scope. Attackers can bypass the re‑pairing authentication to execute privileged commands on the local assistant system. This flaw, identified as CWE‑863, enables an attacker who controls a previously paired node to elevate privileges on the local assistant system, potentially allowing arbitrary command execution, data modification, or service disruption.

All installations of OpenClaw running a version earlier than 2026.4.8 are affected. The vulnerability applies to the OpenClaw application that runs on the node.js platform and uses its pairing feature to accept new connections from previously paired nodes.

The CVSS score of 7.3 classifies this issue as high severity. The EPSS score is reported to be less than 1% (effectively 0.00023), indicating a low but non‑zero exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector requires the attacker to own or compromise a node that has already been paired with the target system; once that node is able to initiate a reconnection, the attacker can execute privileged commands without additional authentication.