Is there a patch available for CVE-2026-35662?

Yes, a patch is available for CVE-2026-35662. Update the affected software to the latest version immediately.

Openclaw CVE-2026-35662

Q: What is the CVSS score of CVE-2026-35662?

CVE-2026-35662 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-21470 MEDIUM

Missing Authorization (CWE-862)

2026-04-10 VulnCheck

Authentication Bypass Openclaw

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21470

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 fails to enforce controlScope restrictions on the send action, allowing leaf subagents to message controlled child sessions beyond their authorized scope. Attackers can exploit this by using the send action to communicate with child sessions without proper scope validation, bypassing intended access control restrictions.

AnalysisAI

OpenClaw before version 2026.3.22 fails to enforce controlScope restrictions on the send action, allowing authenticated leaf subagents to bypass access control and message child sessions beyond their authorized scope. An authenticated attacker with subagent privileges can exploit this via the send action to communicate with restricted child sessions without proper validation, resulting in unauthorized inter-session message relay. No public exploit code has been identified, but the vulnerability has a moderate CVSS score of 4.3 reflecting the integrity impact and low attack complexity.

Technical ContextAI

OpenClaw is a multi-agent orchestration platform that uses controlScope restrictions to enforce access control boundaries between agent hierarchies. The vulnerability exists in the send action handler, which is responsible for message routing between parent agents and their child sessions. The root cause is classified under CWE-862 (Missing Authorization), indicating a failure in the access control enforcement logic. When leaf subagents invoke the send action, the platform does not validate whether the target child session is within the subagent's authorized controlScope, allowing scope boundaries to be circumvented. This affects all versions of OpenClaw prior to 2026.3.22, as identified by the CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, meaning any version before the patched release is vulnerable.

RemediationAI

Vendor-released patch: Upgrade to OpenClaw version 2026.3.22 or later. The fix has been implemented in two commits: 630f1479c44f78484dfa21bb407cbe6f171dac87 and 7679eb375294941b02214c234aff3948796969d0, which restore proper controlScope validation in the send action handler. Operators should apply the update immediately, particularly in environments where subagent isolation is a security requirement. For environments unable to patch immediately, restrict the privileges of leaf subagents or implement network-level message filtering to prevent unauthorized child session communication. Consult the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-x2cm-hg9c-mf5w for detailed mitigation guidance.