privilege escalation 2 When /pair approve Bypasses the Scope Guard Mar 28, 2026 When Your Dashboard Leaks the Keys: A CVSS 9.0 Credential Exposure in OpenClaw Mar 20, 2026