Is there a patch available for CVE-2026-35619?

Yes, a patch is available for CVE-2026-35619. Update the affected software to the latest version immediately.

Openclaw CVE-2026-35619

Q: What is the CVSS score of CVE-2026-35619?

CVE-2026-35619 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21430 MEDIUM

Incorrect Authorization (CWE-863)

2026-04-10 VulnCheck

Authentication Bypass Openclaw

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21430

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only operator.approvals scope can enumerate gateway model metadata through the HTTP compatibility route, bypassing the stricter WebSocket RPC authorization checks.

AnalysisAI

OpenClaw before version 2026.3.24 allows authenticated operators with only operator.approvals scope to enumerate sensitive gateway model metadata via the HTTP /v1/models endpoint, bypassing stricter WebSocket RPC authorization controls. Attackers with limited operator privileges can access information that should be restricted to higher-privilege read scopes, resulting in unauthorized information disclosure.

Technical ContextAI

OpenClaw implements a multi-transport authorization architecture distinguishing between HTTP REST endpoints and WebSocket RPC channels. The vulnerability stems from CWE-863 (Incorrect Authorization), where the HTTP /v1/models endpoint fails to validate operator read scope requirements before exposing gateway model metadata. While WebSocket RPC channels enforce stricter scope checks, the HTTP compatibility route does not consistently apply the same authorization policies, creating an inconsistent security posture across transport protocols. The affected component is the HTTP API layer in OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), specifically versions prior to 2026.3.24.

RemediationAI

Upgrade OpenClaw to version 2026.3.24 or later; vendor-released patch confirmed via commit 06de515b6c42816b62ec752e1c221cab67b38501 addressing the authorization bypass in the /v1/models endpoint. For organizations unable to upgrade immediately, implement network-level restrictions on the HTTP /v1/models endpoint to limit access to trusted operator IP ranges, and audit existing operator accounts to verify that operator.approvals scope is narrowly assigned only to accounts that require it. Additionally, monitor HTTP access logs to /v1/models for unusual enumeration patterns from low-privilege operator accounts. See the GitHub security advisory (https://github.com/openclaw/openclaw/security/advisories/GHSA-68f8-9mhj-h2mp) and VulnCheck advisory (https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-v1-models-endpoint) for additional context.