GHSA-gjm7-hw8f-73rq: OpenClaw: Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

April 3, 2026

Paired node escalates to gateway RCE via unrestricted node.event agent dispatch

References

github.com/advisories/GHSA-gjm7-hw8f-73rq
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/a77928b1087e90f2a8903f8e5aca6dec9237ac62
github.com/openclaw/openclaw/releases/tag/v2026.3.31
github.com/openclaw/openclaw/security/advisories/GHSA-gjm7-hw8f-73rq

Code Behaviors & Features

Detect and mitigate GHSA-gjm7-hw8f-73rq with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →