---
title: "GHSA-4jpw-hj22-2xmc: OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE"
url: https://erroneo.us/security/ghsa/GHSA-4jpw-hj22-2xmc/
description: "GHSA-4jpw-hj22-2xmc (critical, npm): OpenClaw: Pairing-scoped device tokens could mint operator.admin and reach node RCE. Summary In affected versions of…"
type: advisory
section: "Security Digest"
date_published: 2026-03-13
date_modified: 2026-03-13
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-4jpw-hj22-2xmc"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-4jpw-hj22-2xmc: OpenClaw: Pairing-scoped device tokens could mint `operator.admin` and reach node RCE

## Affected packages

- npm `openclaw` < 2026.3.11 → fixed: 2026.3.11

## Details

Summary In affected versions of openclaw, a caller holding only operator.pairing could use device.token.rotate to mint a new token with broader scopes for an already paired device. If the target device was approved for operator.admin, the attacker could obtain an administrative token without already holding administrative scope. Impact This is a critical authorization flaw. On deployments with connected node hosts or companion apps that expose system.run, the escalated token could then modify node execution approvals and reach real remote code execution on the node. Even without nodes, the flaw still granted unauthorized gateway-admin access. Affected Packages and Versions - Package: openclaw (npm) - Affected versions:

## Sources

- [GitHub Advisory GHSA-4jpw-hj22-2xmc](https://github.com/advisories/GHSA-4jpw-hj22-2xmc)
- [github.com](https://github.com/openclaw/openclaw/security/advisories/GHSA-4jpw-hj22-2xmc)
- [github.com](https://github.com/openclaw/openclaw/releases/tag/v2026.3.11)

---
Source page: https://erroneo.us/security/ghsa/GHSA-4jpw-hj22-2xmc/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt