Threats tagged 'ghsa-67mf-f936-ppxf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.8	CVE-2026-42426OpenClaw `node.pair.approve` placed High8.82026-04-09GCVE DatabaseCVE-2026-42426 OpenClaw versions up to 2026.4.1 contain a vulnerability where the node.pair.approve method is assigned the broader operator.write scope instead of the more restrictive operator.pairing scope. This misconfiguration allows unprivileged users to approve pairings improperly. The issue is fixed in version 2026.4.8. Vulnerability CWE-269 #ghsa-67mf-f936-ppxf #npm	GCVE Database	2026-04-09

Page 1 of 1