Is there a patch available for CVE-2026-35648?

Yes, a patch is available for CVE-2026-35648. Update the affected software to the latest version immediately.

Openclaw CVE-2026-35648

Q: What is the CVSS score of CVE-2026-35648?

CVE-2026-35648 has a CVSS 4.0 base score of 2.3 (Low). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21442 LOW

Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)

2026-04-10 VulnCheck

Authentication Bypass Openclaw

2.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.3 LOW

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21442

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

LOW 2.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 contains a policy bypass vulnerability where queued node actions are not revalidated against current command policy when delivered. Attackers can exploit stale allowlists or declarations that survive policy tightening to execute unauthorized commands.

AnalysisAI

OpenClaw before version 2026.3.22 allows policy bypass through unvalidated queued node actions, enabling attackers to execute unauthorized commands by exploiting stale allowlists or policy declarations that persist after policy changes. The vulnerability requires network access and high attack complexity but no authentication, resulting in integrity impact without exposing confidentiality or availability. No public exploit code or active exploitation has been confirmed.

Technical ContextAI

OpenClaw is a command execution and policy enforcement framework that manages node actions through a queuing mechanism. The vulnerability stems from CWE-367 (Time-of-check Time-of-use race condition), where queued actions are delivered without revalidation against the current command policy state. When administrators tighten access policies, previously queued commands may reference allowlists or policy declarations that no longer reflect the current security posture. The affected component (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) fails to validate queued node actions at execution time, allowing commands that should have been blocked by updated policies to proceed. This represents a logic flaw in the policy enforcement mechanism rather than a cryptographic or network protocol weakness.

RemediationAI

Vendor-released patch: OpenClaw 2026.3.22 or later. Users should upgrade immediately to the patched version. Two upstream commits (630f1479c44f78484dfa21bb407cbe6f171dac87 and ec2c6d83b9f5f91d6d9094842e0f19b88e63e3e2) document the fixes; these commits enforce revalidation of queued node actions against the current policy state before delivery. As a temporary workaround pending upgrade, administrators should flush or manually review pending queued actions whenever command policies are tightened, and implement process controls to verify that policy changes are applied to in-flight requests. Details are available in the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-wj55-88gf-x564 and the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-policy-bypass-via-unvalidated-queued-node-actions.