Loading...
Skip to main content
GeekWala

CVE-2026-35663

CRITICAL

OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin

Published March 27, 2026Updated April 10, 2026Source: osv

Summary

## Summary Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin ## Affected Packages / Versions - Package: `openclaw` - Affected versions: `<= 2026.3.24` - First patched version: `2026.3.25` - Latest published npm version at verification time: `2026.3.24` ## Details Backend-labeled reconnects could previously self-request broader scopes and bypass pairing, allowing non-admin operators to reconnect as `operator.admin`. Commit `d3d8e316bd819d3c7e34253aeb7eccb2510f5f48` removes the backend self-pairing skip and requires pairing when requested scopes exceed the approved baseline. Verified vulnerable on tag `v2026.3.24` and fixed on `main` by commit `d3d8e316bd819d3c7e34253aeb7eccb2510f5f48`. ## Fix Commit(s) - `d3d8e316bd819d3c7e34253aeb7eccb2510f5f48`

Affected Packages (1)

PackageEcosystemAffectedFixed In
openclaw
npm
All versionsRange-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

  • CWE-269
    Improper Privilege ManagementMITRE
  • CWE-863
    Incorrect AuthorizationMITRE

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.6 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

References

Frequently Asked Questions

What is CVE-2026-35663?
OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.6/10).
How do I check if my project is affected by CVE-2026-35663?
CVE-2026-35663 affects openclaw. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2026-35663 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.6

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-9hjh-fr4f-gxc4

Related CVEs

  • CVE-2026-32013
    CRITICAL

    OpenClaw gateway agents.files symlink escape allowed out-of-workspace file read/write

  • CVE-2026-34507
    CRITICAL

    OpenClaw: QQBot admin commands could skip DM-only and allowFrom policy

  • CVE-2026-41397
    HIGH

    OpenClaw: OpenShell Mirror Sync — Sandbox Escape via Unrestricted File Sync + Symlink Traversal

  • CVE-2026-45006
    HIGH

    OpenClaw's gateway config mutation guard allowed unsafe model-driven config writes

  • CVE-2026-35643
    HIGH

    OpenClaw: Arbitrary code execution via unvalidated WebView JavascriptInterface

  • CVE-2026-53807
    HIGH

    OpenClaw: Telegram interactive callbacks could skip commands.allowFrom

  • CVE-2026-42422
    MEDIUM

    OpenClaw `device.token.rotate` mints tokens for unapproved roles, bypassing device role-upgrade pairing

  • CVE-2026-32038
    MEDIUM

    OpenClaw has a sandbox network isolation bypass via docker.network=container:<id>

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies