Beveiligingsadvies

CVE-2026-35663

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-10 16:03:23
Laatst bijgewerkt 2026-06-23 16:16:17
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.25 contains a privilege escalation vulnerability allowing non-admin operators to self-request broader scopes during backend reconnect. Attackers can bypass pairing requirements to reconnect as operator.admin, gaining unauthorized administrative privileges.