OpenClaw before 2026.4.8 contains a privilege escalation vulnerability allowing previously paired nodes to reconnect with exec-capable commands without operator…

OpenClaw before version 2026.4.8 contains a privilege escalation vulnerability that allows previously paired nodes to reconnect and execute privileged commands without proper authentication. The vulnerability enables attackers to bypass re-pairing authentication requirements and execute exec-capable commands without the required operator.admin scope. This allows unauthorized execution of privileged commands on the local assistant system through a node pairing reconnect bypass mechanism.