← Back to all CVEs

CVE-2026-32067

LOW openclaw NVD
CVSS Score 3.7
Severity LOW
Published Mar 21, 2026
Vendor openclaw

Description

OpenClaw versions prior to 2026.2.26 contains an authorization bypass vulnerability in the pairing-store access control for direct message pairing policy that allows attackers to reuse pairing approvals across multiple accounts. An attacker approved as a sender in one account can be automatically accepted in another account in multi-account deployments without explicit approval, bypassing authorization boundaries.

References