Is there a patch available for EUVD-2026-21456?

Yes, a patch is available for EUVD-2026-21456. Update the affected software to the latest version immediately.

Openclaw EUVD-2026-21456

Q: What is the CVSS score of EUVD-2026-21456?

EUVD-2026-21456 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-35655 MEDIUM

Reliance on Untrusted Inputs in a Security Decision (CWE-807)

2026-04-10 VulnCheck

Authentication Bypass Openclaw

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 10, 2026 - 16:30 euvd

EUVD-2026-21456

Analysis Generated

Apr 10, 2026 - 16:30 vuln.today

Patch released

Apr 10, 2026 - 16:30 nvd

Patch available

CVE Published

Apr 10, 2026 - 16:03 nvd

MEDIUM 6.9

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

5 npm packages depend on openclaw (5 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.22.

DescriptionCVE.org

OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers can spoof tool identities through rawInput parameters to suppress dangerous-tool prompting and bypass security restrictions.

AnalysisAI

OpenClaw before version 2026.3.22 allows authenticated remote attackers to spoof tool identities through rawInput parameters, bypassing ACP permission resolution and suppressing dangerous-tool prompting via identity hint conflicts between rawInput and metadata. This authentication bypass with high integrity impact affects all versions prior to the fixed release, enabling attackers to circumvent security restrictions intended to prevent execution of dangerous operations.

Technical ContextAI

OpenClaw's ACP (Access Control Policy) permission resolution mechanism validates tool identity through conflicting sources: rawInput parameters and metadata fields. The vulnerability (CWE-807: Reliance on Untrusted Inputs in a Security Decision) stems from trusting unauthenticated user-supplied rawInput hints over properly validated metadata, allowing identity spoofing. When an attacker crafts rawInput to claim a benign tool identity while performing dangerous operations, the permission system fails to detect the mismatch, permitting operations that should trigger security warnings or be blocked outright. This affects the OpenClaw application framework (CPE: cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*) across all versions before 2026.3.22.

RemediationAI

Vendor-released patch: upgrade to OpenClaw 2026.3.22 or later. Fixes are available via commits 630f1479c44f78484dfa21bb407cbe6f171dac87 and e4c61723cd2d530680cc61789311d464ab8cdf60 in the upstream repository. Organizations unable to patch immediately should implement compensating controls such as strict audit logging of rawInput parameters in ACP resolution, enforcement of metadata-only tool identity validation at the application layer, and restriction of dangerous-tool operations to specific roles or administrative channels with additional approval workflows. Consult the GitHub Security Advisory (GHSA-74wf-h43j-vvmj) for workaround details and version confirmation.