CVE-2026-35669
1 advisory.
npm/openclaw CVE-2026-35669: high, EPSS 0.52%
OpenClaw: Gateway Plugin HTTP Auth Grants Unrestricted operator.admin Runtime Scope to All Callers
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qm2m-28pf-hgjw
- https://github.com/openclaw/openclaw/security/advisories/GHSA-qm2m-28pf-hgjw
- https://github.com/openclaw/openclaw/commit/ec2dbcff9afd8a52e00de054b506c91726d9fbbe
- https://github.com/openclaw/openclaw
CVE-2026-35669 · published · modified · JSON