Openclaw CVE-2026-35664

This vulnerability presents moderate real-world risk despite a lower CVSS score of 5.3. The attack vector is network-based with no authentication required (PR:N per CVSS vector) and low complexity, meaning an attacker with basic network access can exploit this without sophisticated techniques. The integrity impact (I:L) is limited but meaningful-unauthorized generation of callback payloads could poison message routing or trigger unintended callback execution. CVSS does not rate confidentiality or availability impact, suggesting the primary concern is integrity of the callback mechanism rather than data breach or DoS. The vulnerability requires no user interaction and affects the complete DM pairing security model. While not confirmed as actively exploited via CISA KEV, the straightforward nature (low complexity, no auth, network-accessible) suggests exploitation is likely if the vulnerability becomes widely known. This is a priority for environments relying on OpenClaw's pairing model for access control.

An unauthenticated attacker on the network crafts a raw card command with a malformed or omitted pairing token and sends it to an OpenClaw deployment. The vulnerable raw card handler accepts the command without verifying DM pairing state, allowing the attacker to trigger callback payload generation and execution as if they were a legitimate paired recipient. This could allow unauthorized callback triggering, message injection, or routing manipulation depending on the callback implementation. No public proof-of-concept code has been identified, but the simplicity of the bypass (network access, no auth, low complexity) makes exploitation straightforward once the specific bypass technique is understood.