CVE-2026-35660
1 advisory.
npm/openclaw CVE-2026-35660: high, EPSS 0.51%
OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers
Action: Upgrade openclaw to 2026.3.23 or later.
npm i openclaw@2026.3.23Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.23 | - |
Fixed versions
| 2026.3.23 |
Sources
- osv: GHSA-wq58-2pvg-5h4f
- https://github.com/openclaw/openclaw/security/advisories/GHSA-wq58-2pvg-5h4f
- https://github.com/openclaw/openclaw/commit/50f6a2f136fed85b58548a38f7a3dbb98d2cd1a0
- https://github.com/openclaw/openclaw
CVE-2026-35660 · published · modified · JSON