Is there a patch available for CVE-2026-35621?

Yes, a patch is available for CVE-2026-35621. Update the affected software to the latest version immediately.

Openclaw CVE-2026-35621

Q: What is the CVSS score of CVE-2026-35621?

CVE-2026-35621 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21434 HIGH

Missing Authorization (CWE-862)

2026-04-10 VulnCheck

GHSA-94pw-c6m8-p9p9

Privilege Escalation Authentication Bypass Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Apr 10, 2026 - 20:30 nvd

Patch available

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21434

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

CVE Published

Apr 10, 2026 - 16:03 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.24 contains a privilege escalation vulnerability where the /allowlist command fails to re-validate gateway client scopes for internal callers, allowing operator.write-scoped clients to mutate channel authorization policy. Attackers can exploit chat.send to build an internal command-authorized context and persist channel allowFrom and groupAllowFrom policy changes reserved for operator.admin scope.

AnalysisAI

OpenClaw before version 2026.3.24 allows authenticated operator.write-scoped clients to escalate privileges and modify channel authorization policies normally restricted to operator.admin scope through improper scope re-validation in the /allowlist command. Attackers with write-level permissions can exploit the chat.send function to construct an internal command-authorized context and persist unauthorized changes to channel allowFrom and groupAllowFrom policies, effectively bypassing access control mechanisms.

Technical ContextAI

The vulnerability stems from insufficient authorization checks in OpenClaw's /allowlist command implementation (CWE-862: Missing Authorization). When the /allowlist command processes requests from internal callers, it fails to re-validate that the calling client possesses the required operator.admin scope. The root cause involves the chat.send functionality being leveraged to establish an internal command-authorized context that bypasses the normal scope validation logic. This allows lower-privileged operator.write-scoped clients to mutate channel authorization policies (allowFrom and groupAllowFrom configurations) that should be restricted to higher-privilege operator.admin scope holders. The affected product is OpenClaw, with CPE identifier cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, indicating all versions prior to the patched release are potentially affected.

RemediationAI

Vendor-released patch: OpenClaw 2026.3.24 or later. Organizations running OpenClaw versions prior to 2026.3.24 should upgrade immediately to the patched version. Review and audit any recent changes to channel authorization policies (allowFrom and groupAllowFrom configurations) to identify and remediate unauthorized modifications that may have been persisted by lower-privileged operator.write-scoped accounts. Additionally, conduct access reviews to ensure operator.admin scope is granted only to necessary personnel, and consider implementing additional logging and monitoring of /allowlist command invocations and authorization policy mutations. Detailed remediation guidance is available in the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-94pw-c6m8-p9p9.