Beveiligingsadvies

CVE-2026-41386

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-28 18:09:48
Laatst bijgewerkt 2026-04-29 12:49:41
Toegewezen door VulnCheck
CVSS-score 9.1
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.22 contains a privilege escalation vulnerability where bootstrap setup codes are not bound to intended device roles and scopes during pairing. Attackers can exploit this during first-use device pairing to escalate privileges beyond their intended role and scope.