CVE-2026-35619
1 advisory.
npm/openclaw CVE-2026-35619: medium 4.3
OpenClaw has a Gateway HTTP /v1/models Route Bypasses Operator Read Scope
Action: Upgrade openclaw to 2026.3.24 or later.
npm i openclaw@2026.3.24Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.24 | - |
Fixed versions
| 2026.3.24 |
Sources
- osv: GHSA-68f8-9mhj-h2mp
- https://github.com/openclaw/openclaw/security/advisories/GHSA-68f8-9mhj-h2mp
- https://nvd.nist.gov/vuln/detail/CVE-2026-35619
- https://github.com/openclaw/openclaw/commit/06de515b6c42816b62ec752e1c221cab67b38501
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-v1-models-endpoint
CVE-2026-35619 · published · modified · JSON