OpenClaw Privilege Escalation via Unbound Bootstrap Codes

A high-severity privilege escalation vulnerability affects the OpenClaw npm package. Specifically, versions up to and including 2026.3.13-1 are vulnerable. The flaw stems from a lack of proper binding for bootstrap setup codes, which are used during the initial device pairing. This allows an attacker to potentially escalate privileges during the first-time setup process. The vulnerability was reported by @tdjackey and patched in version 2026.3.22, with the fix committed on March 22, 2026. Defenders should ensure that all OpenClaw installations are updated to version 2026.3.22 or later to mitigate this risk.

Attack Chain

1. Attacker gains access to an OpenClaw deployment using a vulnerable version (<=2026.3.13-1). This could involve an initial install of the package.
2. Attacker initiates the device pairing process, triggering the bootstrap setup code functionality.
3. The application fails to properly validate the scope or role associated with the bootstrap setup code.
4. Attacker leverages the unbound bootstrap setup code to request elevated privileges.
5. Due to the missing validation, the application grants the attacker's request for elevated privileges.
6. The attacker now operates with higher privileges within the OpenClaw environment.
7. Attacker performs actions that require elevated privileges, such as modifying system settings or accessing sensitive data.

Impact

Successful exploitation of this vulnerability allows an attacker to escalate their privileges within the OpenClaw application. This can lead to unauthorized access to sensitive data, modification of critical system settings, and potentially full control over the affected system. The number of affected installations is unknown, but any OpenClaw deployment using a vulnerable version is susceptible to this attack.

Recommendation

• Upgrade OpenClaw installations to version 2026.3.22 or later to remediate the vulnerability.
• If upgrading is not immediately possible, investigate any suspicious activity related to device pairing and bootstrap code usage.