CVE-2026-35625
1 advisory.
npm/openclaw CVE-2026-35625: critical
OpenClaw: Silent privilege escalation via gateway shared-auth reconnect
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fqw4-mph7-2vr8
- https://github.com/openclaw/openclaw/security/advisories/GHSA-fqw4-mph7-2vr8
- https://github.com/openclaw/openclaw/commit/81ebc7e0344fd19c85778e883bad45e2da972229
- https://github.com/openclaw/openclaw
CVE-2026-35625 · published · modified · JSON