Is there a patch available for CVE-2026-35659?

Yes, a patch is available for CVE-2026-35659. Update the affected software to the latest version immediately.

Openclaw CVE-2026-35659

Q: What is the CVSS score of CVE-2026-35659?

CVE-2026-35659 has a CVSS 4.0 base score of 5.1 (Medium). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21464 MEDIUM

Insufficient Verification of Data Authenticity (CWE-345)

2026-04-10 VulnCheck

Information Disclosure Openclaw

5.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.1 MEDIUM

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21464

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

MEDIUM 5.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution failed. Attackers can exploit unresolved hints to steer routing decisions to unintended targets by providing malicious discovery metadata.

AnalysisAI

OpenClaw before version 2026.3.22 accepts unresolved Bonjour and DNS-SD service discovery metadata to influence CLI routing decisions, allowing attackers on adjacent networks to redirect traffic to attacker-controlled targets through malicious TXT records. The vulnerability requires user interaction and adjacent network access but can cause information disclosure and integrity compromise without authentication.

Technical ContextAI

The vulnerability stems from CWE-345 (Insufficient Verification of Data Authenticity), where OpenClaw's CLI routing logic trusts Bonjour/DNS-SD TXT metadata even when service resolution fails. Bonjour and DNS-SD are zero-configuration networking protocols that advertise services via multicast DNS. The flaw allows an attacker to craft malicious DNS-SD discovery packets containing falsified service metadata (TXT records) that influence routing decisions despite the underlying service never resolving to a valid endpoint. This is a logic flaw in the service discovery trust chain-the application acts on hints without proper endpoint validation. The affected product OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) versions prior to 2026.3.22 are vulnerable.

RemediationAI

Upgrade OpenClaw to version 2026.3.22 or later. Vendor-released patch is available; upstream fixes are documented in commits 630f1479c44f78484dfa21bb407cbe6f171dac87 and deecf68b59a9b7eea978e40fd3c2fe543087b569 on GitHub. Until patched, operators should restrict network access to systems running OpenClaw and avoid using Bonjour/DNS-SD service discovery on untrusted network segments, or disable automatic service discovery if alternative configuration methods are available. See the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-rvqr-hrcc-j9vv for detailed mitigation options.