Openclaw CVE-2026-35635

The CVSS 4.0 vector indicates this is a network-accessible vulnerability requiring no authentication (PR:N) with high attack complexity (AC:H) and partial time-based constraints (AT:P), resulting in a base score of 6.3. The attack vector is remote (AV:N) with limited confidentiality and integrity impact (VC:L, VI:L). While the CVSS score is moderate, the practical exploitation probability is constrained by high attack complexity and partial time requirements, suggesting this is not a trivial vulnerability to exploit in real-world scenarios. The fact that a vendor patch is available and the vulnerability has been publicly disclosed through both GitHub advisories and VulnCheck indicates this is a known issue requiring timely remediation. The authentication bypass nature of the vulnerability and its impact on access control policies elevate its severity beyond the base CVSS score, particularly for multi-account deployments. No confirmed active exploitation or exploitation probability data (EPSS) is provided, so real-world risk depends heavily on deployment prevalence and attacker motivation.

An attacker identifies two separate OpenClaw accounts both configured with Synology Chat webhooks, potentially with identical or inherited webhook paths due to misconfiguration or template reuse. The attacker crafts a request targeting the webhook endpoint with a manipulated path parameter that collapses the routing logic for both accounts onto a single endpoint. This allows the attacker to intercept or redirect direct messages intended for one account to another, or to trigger actions within protected accounts without the normal per-account authentication checks. The high attack complexity and partial time constraints suggest the attacker must have detailed knowledge of the target's webhook configuration and may need to time the request during a specific operational window.