privilege escalation 1 When Your Dashboard Leaks the Keys: A CVSS 9.0 Credential Exposure in OpenClaw Mar 20, 2026