---
title: "GHSA-fqw4-mph7-2vr8: OpenClaw: Silent privilege escalation via gateway shared-auth reconnect"
url: https://erroneo.us/security/ghsa/GHSA-fqw4-mph7-2vr8/
description: "GHSA-fqw4-mph7-2vr8 (critical, npm): OpenClaw: Silent privilege escalation via gateway shared-auth reconnect. Summary Gateway local shared-auth reconnect…"
type: advisory
section: "Security Digest"
date_published: 2026-03-27
date_modified: 2026-03-27
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-fqw4-mph7-2vr8"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-fqw4-mph7-2vr8: OpenClaw: Silent privilege escalation via gateway shared-auth reconnect

## Affected packages

- npm `openclaw` <= 2026.3.24 → fixed: none listed

## Details

Summary Gateway local shared-auth reconnect silently widens paired device scope from operator.read to operator.admin and reach node RCE Affected Packages / Versions - Package: openclaw - Affected versions:

## Sources

- [GitHub Advisory GHSA-fqw4-mph7-2vr8](https://github.com/advisories/GHSA-fqw4-mph7-2vr8)
- [github.com](https://github.com/openclaw/openclaw/security/advisories/GHSA-fqw4-mph7-2vr8)
- [github.com](https://github.com/openclaw/openclaw/commit/81ebc7e0344fd19c85778e883bad45e2da972229)

---
Source page: https://erroneo.us/security/ghsa/GHSA-fqw4-mph7-2vr8/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt