Loading vulnerability…
OpenClaw Remote Code Execution via Node Scope Gate Bypass
CVE-2026-41352 is a remote code execution vulnerability affecting OpenClaw versions prior to 2026.3.31. The flaw is described as a missing authorization issue in which a device-paired node can bypass the node scope gate authentication mechanism. Because proper node pairing validation is not enforced, an attacker who possesses valid device pairing credentials can issue arbitrary node commands to the host system and achieve remote command execution.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows remote execution of arbitrary node commands on the affected host system. Given the provided CVSS vectors and description, the impact includes high confidentiality, integrity, and availability consequences, enabling an attacker with low privileges and no user interaction to run commands, access or manipulate data, and disrupt system operation on the host running OpenClaw.
If you can’t patch tonight, do this now.
If immediate patching is not possible, restrict exposure of OpenClaw node command interfaces to trusted networks and trusted paired devices only, rotate and protect device pairing credentials, revoke unnecessary or stale pairings, and monitor for unexpected node command execution. Because exploitation requires device pairing credentials, reducing credential exposure and limiting which paired nodes can reach the service may reduce risk, but upgrading remains the primary mitigation.
Patch, then assume compromise.
Upgrade OpenClaw to version 2026.3.31 or later, which is the first version indicated as not affected. Review and apply the upstream fix associated with the referenced GitHub commit 3886b65ef21d02808c1a106fa1f9f69e22f71c32 and any related vendor guidance in GHSA-xj9w-5r6q-x6v4.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.