npm/openclaw CVE-2026-35647: medium 5.3, EPSS 0.29%
OpenClaw: Matrix Verification Notices Bypass Matrix DM Policy and Reply to Unpaired DM Peers
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9wqx-g2cw-vc7r
- nvd: CVE-2026-35647
- https://github.com/openclaw/openclaw/security/advisories/GHSA-9wqx-g2cw-vc7r
- https://github.com/openclaw/openclaw/commit/2383daf5c4a4e08d9553e0e949552ad755ef9ec2
- https://github.com/openclaw/openclaw
CVE-2026-35647 · published · modified · JSON