Loading...
Skip to main content
GeekWala

CVE-2026-35663 — Vulnerability in openclaw — CVE Details

CRITICAL

OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin

Published March 27, 2026Updated April 10, 2026Source: osv

Summary

## Summary Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin ## Affected Packages / Versions - Package: `openclaw` - Affected versions: `<= 2026.3.24` - First patched version: `2026.3.25` - Latest published npm version at verification time: `2026.3.24` ## Details Backend-labeled reconnects could previously self-request broader scopes and bypass pairing, allowing non-admin operators to reconnect as `operator.admin`. Commit `d3d8e316bd819d3c7e34253aeb7eccb2510f5f48` removes the backend self-pairing skip and requires pairing when requested scopes exceed the approved baseline. Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `d3d8e316bd819d3c7e34253aeb7eccb2510f5f48`. ## Fix Commit(s) - `d3d8e316bd819d3c7e34253aeb7eccb2510f5f48`

Advisory Timeline

  • First published March 27, 2026 (198 days ago).
  • Last revised April 10, 2026 — 14 days after initial publication.

Affected Packages (1)

Affects 1 ecosystem: npm (1).

PackageEcosystemAffectedFixed In
openclaw
npm
All versionsRange-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

  • CWE-269
    Improper Privilege ManagementMITRE
  • CWE-863
    Incorrect AuthorizationMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.6 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

References

Frequently Asked Questions

What is CVE-2026-35663?
OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.6/10).
How do I check if my project is affected by CVE-2026-35663?
CVE-2026-35663 affects openclaw. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-35663 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.6

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-9hjh-fr4f-gxc4

Related CVEs

  • CVE-2026-28363
    CRITICAL

    OpenClaw is vulnerable to validation bypass through GNU long-option abbreviations in allowlist mode

  • CVE-2026-42434
    HIGH

    OpenClaw: Sandboxed agents could escape exec routing via host=node override

  • CVE-2026-53811
    HIGH

    OpenClaw: Matrix allowFrom could bind to mutable display names

  • CVE-2026-28391
    HIGH

    OpenClaw's Windows cmd.exe parsing may bypass exec allowlist/approval gating

  • CVE-2026-53821
    HIGH

    OpenClaw: Trusted-proxy Control UI WebSocket accepted client-declared scopes before pairing

  • CVE-2026-35669
    HIGH

    OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers

  • CVE-2026-35666
    HIGH

    OpenClaw's system.run allowlist can be bypassed through an unregistered time dispatch wrapper

  • CVE-2026-43534
    MEDIUM

    OpenClaw: Agent hook events could enqueue trusted system events from unsanitized external input

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies