How to fix or mitigate CVE-2026-35631?

Within 24 hours: Identify all OpenClaw deployments and current versions via asset inventory; verify which systems run versions prior to 2026.3.22. Within 7 days: Apply vendor-released patch to OpenClaw 2026.3.22 or later across all affected instances; prioritize control-plane and production environments. Within 30 days: Audit access logs for unauthorized admin-level operations by low-privilege accounts; review and re-validate RBAC policies post-patch; implement enhanced logging for ACP chat command execution.

Openclaw CVE-2026-35631

Q: What is the CVSS score of CVE-2026-35631?

CVE-2026-35631 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

Q: Which versions of Openclaw are affected by CVE-2026-35631?

OpenClaw versions before 2026.3.22 contain an authorization bypass that permits authenticated low-privilege users to execute administrative operations, enabling lateral privilege escalation to…. A patch is available.

EUVD-2026-21118 HIGH

Missing Authorization (CWE-862)

2026-04-09 VulnCheck

GHSA-3xcc-5274-wv65

Authentication Bypass Openclaw

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21118

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

Patch released

Apr 09, 2026 - 21:45 nvd

Patch available

CVE Published

Apr 09, 2026 - 21:27 nvd

HIGH 7.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 fails to enforce operator.admin scope on mutating internal ACP chat commands, allowing unauthorized modifications. Attackers without admin privileges can execute mutating control-plane actions by directly invoking affected ACP commands to bypass authorization gates.

AnalysisAI

Authorization bypass in OpenClaw versions prior to 2026.3.22 allows authenticated low-privilege users to execute administrative control-plane operations through internal ACP chat commands. The vulnerability stems from missing operator.admin scope enforcement on mutating commands, enabling unauthorized users to invoke privileged actions that modify system configuration or state. Exploitation requires authenticated access but no elevated privileges, permitting lateral privilege escalation to administrative functions. No public exploit identified at time of analysis.

Technical ContextAI

CWE-862 missing authorization flaw in ACP (Admin Control Plane) chat command handler. Application fails to validate operator.admin scope before processing mutating internal commands, bypassing intended RBAC controls. CVSS:4.0 PR:L confirms authenticated attack surface with high integrity impact (VI:H) against network-accessible endpoint (AV:N, AC:L).

RemediationAI

Vendor-released patch: upgrade to OpenClaw version 2026.3.22 or later, which implements proper operator.admin scope validation on mutating ACP chat commands. Two upstream commits address the vulnerability: commit 630f1479c44f78484dfa21bb407cbe6f171dac87 and commit 229426a257e49694a59fa4e3895861d02a4d767f add authorization enforcement to affected command handlers. Organizations unable to immediately upgrade should restrict network access to ACP chat interfaces and audit user privilege assignments. Review access logs for unauthorized administrative command invocations by non-admin accounts. Vendor advisory available at https://github.com/openclaw/openclaw/security/advisories/GHSA-3w6x-gv34-mqpf with full technical details and detection guidance.