CVE-2026-42426 affects OpenClaw versions before 2026.4.8, containing an improper authorization vulnerability in the node.pair.approve method. The vulnerability occurs when the method accepts operator.write scope instead of the more restrictive operator.pairing scope. This flaw allows unprivileged users to approve node pairing operations. Attackers who possess operator.write permissions can exploit this to bypass pairing approval restrictions. The vulnerability enables unauthorized access to exec-capable nodes, potentially allowing command execution. The issue has been patched in OpenClaw version 2026.4.8.