Openclaw CVE-2026-35657

Attacker requires low-privilege authenticated access to OpenClaw before version 2026.3.25. The vulnerable HTTP endpoint /sessions/:sessionKey/history bypasses operator.read scope validation, allowing authenticated users without proper permissions to access session history via direct HTTP requests.

This is a moderate-severity vulnerability with meaningful real-world risk despite the CVSS 6.5 score. The CVSS vector (PR:L/UI:N/AV:N/AC:L/C:H/I:N/A:N) indicates that an authenticated user with limited privileges can remotely access confidential session history without user interaction or high attack complexity, directly explaining the high confidentiality impact rating. The vulnerability requires prior authentication (PR:L), which limits the attack surface to accounts that already exist in the system-likely insiders or compromised low-privilege accounts. The lack of integrity or availability impact (I:N/A:N) means this is purely an information disclosure issue. No public exploit code or active exploitation has been confirmed, reducing immediate urgency relative to unauthenticated remote code execution vulnerabilities; however, the ease of exploitation (low complexity, no interaction required) and high sensitivity of session history data (authentication tokens, user activity logs, potentially PII) make this a priority for authenticated-access-only systems. The confirmed availability of a vendor patch further supports prioritization for timely remediation.

An authenticated user with limited privileges (e.g., a junior analyst account with no operator.read scope) logs into an OpenClaw instance and directly requests the /sessions/:sessionKey/history endpoint for a session belonging to a senior operator. The vulnerable endpoint skips authorization validation and returns the full session history, exposing sensitive details such as authentication tokens, API interactions, or audit logs that should have been restricted. This could enable privilege escalation, lateral movement, or data theft if the exposed session data contains credentials or sensitive operational information.