Is there a patch available for CVE-2026-35647?

Yes, a patch is available for CVE-2026-35647. Update the affected software to the latest version immediately.

Openclaw CVE-2026-35647

Q: What is the CVSS score of CVE-2026-35647?

CVE-2026-35647 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21440 MEDIUM

Authentication Bypass Using an Alternate Path or Channel (CWE-288)

2026-04-10 VulnCheck

Authentication Bypass Openclaw

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21440

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

MEDIUM 6.9

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.24.

DescriptionCVE.org

OpenClaw before 2026.3.25 contains an access control vulnerability where verification notices bypass DM policy checks and reply to unpaired peers. Attackers can send verification notices to users outside allowed direct message policies by exploiting insufficient access validation before message transmission.

AnalysisAI

OpenClaw before version 2026.3.25 allows unauthenticated remote attackers to bypass direct message policy controls by sending verification notices to users outside configured allowed peer lists. The vulnerability stems from insufficient access validation checks applied to verification notice transmission, enabling attackers to contact users who have restricted direct messaging policies in place. CVSS score of 5.3 reflects moderate integrity impact with low attack complexity and no authentication requirements.

Technical ContextAI

OpenClaw's direct messaging architecture implements policy-based access controls to restrict which peers can initiate direct message conversations with a given user. The vulnerability exists in the verification notice subsystem, a messaging feature intended to validate peer identities or connection states. The root cause is classified under CWE-288 (Authentication Using a Broken or Risky Cryptographic Algorithm), indicating that the access control mechanism fails to properly authenticate or validate the sender's authorization before allowing verification notice delivery. The affected product is identified via CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, affecting all versions prior to 2026.3.25. The vulnerability allows message transmission to occur without enforcing the DM (direct message) policy restrictions that would normally block communication from non-paired or non-whitelisted peers.

RemediationAI

Vendor-released patch: upgrade to OpenClaw version 2026.3.25 or later. The upstream fix is available via commit 2383daf5c4a4e08d9553e0e949552ad755ef9ec2 at https://github.com/openclaw/openclaw/commit/2383daf5c4a4e08d9553e0e949552ad755ef9ec2. Organizations running OpenClaw should prioritize this update to restore proper enforcement of direct message policy restrictions. No workarounds are available pending patching; the fix addresses the insufficient access validation in the verification notice transmission pathway.