CVE-2026-35663
1 advisory.
npm/openclaw CVE-2026-35663: critical, EPSS 0.52%
OpenClaw: Gateway Backend Reconnect lets Non-Admin Operator Scopes Self-Claim operator.admin
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9hjh-fr4f-gxc4
- https://github.com/openclaw/openclaw/security/advisories/GHSA-9hjh-fr4f-gxc4
- https://github.com/openclaw/openclaw/commit/d3d8e316bd819d3c7e34253aeb7eccb2510f5f48
- https://github.com/openclaw/openclaw
CVE-2026-35663 · published · modified · JSON