CVE-2026-35623
1 advisory.
npm/openclaw CVE-2026-35623: medium 4.8
OpenClaw: BlueBubbles Webhook Missing Rate Limiting Enables Brute-Force Password Guessing
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xq8g-hgh6-87hv
- https://github.com/openclaw/openclaw/security/advisories/GHSA-xq8g-hgh6-87hv
- https://nvd.nist.gov/vuln/detail/CVE-2026-35623
- https://github.com/openclaw/openclaw/commit/5e08ce36d522a1c96df2bfe88e39303ae2643d92
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-brute-force-attack-via-missing-webhook-password-rate-limiting
CVE-2026-35623 · published · modified · JSON