CVE-2026-32922
OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broader scopes by failing to constrain newly minted scopes to the caller's current scope set. Attackers can obtain operator.admin tokens for paired devices and achieve remote code execution on connected nodes via system.run or gain unauthorized gateway-admin access.
- Affected products
- Openclaw
- Openclaw
- < 2026.3.11
- Fix
- Available
- CVSS 3.1
- 9.9 CRITICAL
- EPSS
- 0.5% (42th percentile)
- Weakness
- CWE-266
- NVD status
- Analyzed
- Published
- 2026-03-29
CVE-2026-32922 at NVD
No indexed exploits for CVE-2026-32922 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-32922 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.