SAN FRANCISCO — Developers released security patches on Sunday for three high-severity vulnerabilities in OpenClaw, an AI tool designed to take control of a user's computer and interact with other applications and platforms to assist with tasks including organizing files, doing research, and shopping online. A formal CVE listing for the vulnerabilities was published on Tuesday, two days after the patches became available.

CVE-2026-33579 carries a severity rating between 8.1 and 9.8 out of 10, depending on the metric used. The vulnerability allows anyone with operator.pairing privileges to gain administrative status within an OpenClaw deployment. Exploiting the flaw requires no secondary exploit and no user interaction beyond the initial pairing step.

CVE-2026-33579 stems from OpenClaw failing to invoke authentication during administrative-level pairing requests. In the tool's device pairing code, located in src/infra/device-pairing.ts, the core approval function did not check the approving party's security permissions before granting elevated access.

In an OpenClaw deployment, a compromised operator.admin device can read all connected data sources, exfiltrate credentials stored in the agent's skill environment, execute arbitrary tool calls, and move laterally to other connected services. OpenClaw requires access to resources including Telegram, Discord, Slack, local and shared network files, user accounts, and logged-in sessions. Once granted that access, the tool is designed to act with the same permissions and capabilities as the user, meaning an attacker who gains administrative status could operate across all of those connected platforms.

An internet scan conducted earlier this year found that 63 percent of 135,000 OpenClaw instances exposed to the internet were running without authentication. On those deployments, any network visitor can request pairing access and obtain operator.pairing scope without providing credentials. With no authentication gate in place on such instances, there is nothing to slow down exploitation of CVE-2026-33579.

The two-day gap between the Sunday patch release and the Tuesday CVE listing created a window during which the vulnerabilities had been patched but were not yet formally cataloged in public vulnerability databases. Users who rely on CVE notifications to trigger their update processes would not have received an alert until Tuesday.

OpenClaw was introduced in November and has since accumulated 347,000 stars on GitHub. Separately, a Meta executive told his team to keep OpenClaw off their work laptops or risk termination.