Which versions of Openclaw are affected by CVE-2026-35650?

OpenClaw versions before 2026.3.22 contain a remote code execution vulnerability that allows authenticated users with low privileges to execute arbitrary code by exploiting environment variable…. A patch is available.

How to fix or mitigate CVE-2026-35650?

Within 24 hours: Inventory all OpenClaw deployments and identify systems running versions prior to 2026.3.22. Within 7 days: Apply vendor patch to upgrade OpenClaw to version 2026.3.22 or later across all production and non-production instances. Within 30 days: Conduct access reviews for low-privilege accounts with OpenClaw access and implement audit logging to detect anomalous environment variable modification attempts.

Openclaw CVE-2026-35650

Q: What is the CVSS score of CVE-2026-35650?

CVE-2026-35650 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-21446 HIGH

External Control of System or Configuration Setting (CWE-15)

2026-04-10 VulnCheck

GHSA-39pp-xp36-q6mg

RCE Openclaw

7.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21446

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

HIGH 7.7

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 contains an environment variable override handling vulnerability that allows attackers to bypass the shared host environment policy through inconsistent sanitization paths. Attackers can supply blocked or malformed override keys that slip through inconsistent validation to execute arbitrary code with unintended environment variables.

AnalysisAI

Remote code execution in OpenClaw versions prior to 2026.3.22 allows authenticated attackers to bypass shared host environment policy via inconsistent environment variable sanitization. Attackers exploit validation inconsistencies by supplying malformed or blocked override keys that evade filtering mechanisms, enabling arbitrary code execution with unauthorized environment variable configurations. Vulnerability requires low-privilege authentication and high attack complexity. No public exploit identified at time of analysis.

Technical ContextAI

CWE-15 external control of system or configuration setting vulnerability stems from inconsistent sanitization paths in environment variable override handling. Validation logic fails to uniformly filter malicious override keys across all code paths, creating bypass opportunities. Exploitable via OpenClaw's shared host environment policy enforcement mechanisms when processing attacker-controlled environment variable inputs.

RemediationAI

Vendor-released patch: Upgrade to OpenClaw version 2026.3.22 or later, which implements consistent sanitization logic across all environment variable validation paths. Two upstream commits address the vulnerability: 630f1479c44f78484dfa21bb407cbe6f171dac87 and 7abfff756d6c68d17e21d1657bbacbaec86de232. Official security advisory available at https://github.com/openclaw/openclaw/security/advisories/GHSA-39pp-xp36-q6mg. Until upgrade is completed, restrict low-privilege user access to OpenClaw environment configuration interfaces and enforce strict input validation at network perimeter. Review audit logs for anomalous environment variable override attempts. For complete technical analysis, consult VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-environment-variable-override-bypass-via-inconsistent-sanitization.