Loading vulnerability…
Privilege Escalation in OpenClaw Backend Reconnect
CVE-2026-35663 is a privilege escalation vulnerability affecting OpenClaw versions prior to 2026.3.25. The flaw exists in the backend reconnect logic, where a non-admin operator can self-request broader authorization scopes during reconnect. Due to improper enforcement of pairing requirements and scope validation in this reconnect path, an attacker with a non-administrative operator context can bypass the intended pairing restrictions and reconnect as operator.admin. Successful exploitation results in unauthorized elevation from a lower-privileged operator role to administrative privileges.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows a low-privileged operator to obtain unauthorized administrative access in OpenClaw. With operator.admin privileges, an attacker can perform actions reserved for administrators, resulting in high impact to confidentiality, integrity, and availability as reflected by the published CVSS vectors. This can enable unauthorized access to sensitive data, modification of system state or operator configuration, and disruption or takeover of administrative functionality.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict access to OpenClaw instances and backend reconnect functionality to only trusted users and networks, minimize the number of non-admin operator accounts, and closely monitor for reconnect events requesting elevated scopes or transitions to operator.admin. Enforce compensating controls around operator session management and pairing workflows, and terminate suspicious sessions. These measures may reduce exposure but do not replace upgrading to a fixed version.
Patch, then assume compromise.
Upgrade OpenClaw to version 2026.3.25 or later, which addresses the backend reconnect privilege escalation issue. Review the vendor fix associated with the referenced OpenClaw commit and GitHub Security Advisory GHSA-9hjh-fr4f-gxc4, and ensure the reconnect flow enforces strict server-side validation of requested scopes and pairing requirements. After patching, review operator accounts, active sessions, and audit logs for evidence of unauthorized reconnects or privilege changes.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.