Openclaw CVE-2026-35661

CVSS 5.3 reflects a network-based attack with low complexity and no privileges required, but limited impact (integrity only, no confidentiality or availability loss). EPSS and KEV status are not provided in the input data. The attack vector is network-accessible and exploitable without user interaction (UI:N), making it remotely viable. However, the integrity impact is limited to session state modification rather than data exfiltration or service disruption. While the authorization bypass itself is severe from a design perspective, the actual real-world risk depends on what session mutations an attacker can perform and whether downstream controls mitigate this. The presence of a vendor patch indicates this was deemed actionable. Without EPSS score or KEV confirmation, this appears to be a moderate-priority issue for OpenClaw deployments using Telegram integration-urgent for DM-reliant workflows, but not critical for all users.

An attacker sends a malicious Telegram callback query to an OpenClaw bot's direct message endpoint, crafting the callback data to modify session state (e.g., changing user settings, permissions, or session tokens) without providing proof of DM pairing. The weaker callback authorization logic accepts the mutation because it does not enforce the same pairing requirements as direct message commands, allowing state corruption. No public exploit code is independently confirmed in the provided references, but the attack requires only network access and knowledge of the Telegram bot API.