CVE-2026-35642
1 advisory.
npm/openclaw CVE-2026-35642: medium, EPSS 0.34%
OpenClaw: BlueBubbles Group Reactions Bypass requireMention and Still Enqueue Agent-Visible System Events
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mw7w-g3mg-xqm7
- https://github.com/openclaw/openclaw/security/advisories/GHSA-mw7w-g3mg-xqm7
- https://github.com/openclaw/openclaw/commit/f8c98630785288cc1f1d0893503ef3b653a3cede
- https://github.com/openclaw/openclaw
CVE-2026-35642 · published · modified · JSON