Security Advisory
CVE-2026-41352
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism. Attackers with device pairing credentials can execute arbitrary node commands on the host system without proper node pairing validation.