PT-2026-31772 · Openclaw · Openclaw

Peng Zhou · Published 2026-03-26 · Updated 2026-04-10 · CVE-2026-35637

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.22

Description OpenClaw before version 2026.3.22 performs cite expansion before completing channel and direct message (DM) authorization checks. This allows cite work and content handling to occur before final authorization decisions, potentially enabling unauthorized access or manipulation of content.

Recommendations Update to version 2026.3.22 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-696

CWE-863

Related Identifiers

CVE-2026-35637

GHSA-P6J4-WVMC-VX2H

GHSA-VFG3-PQPQ-93M4

Affected Products

Openclaw

References · 12

• https://github.com/openclaw/openclaw/commit/ebee4e2210e1f282a982c7ef2ad79d77a572fc87 · Patch
• https://github.com/openclaw/openclaw/commit/3cbf932413e41d1836cb91aed1541a28a3122f93 · Patch
• https://github.com/openclaw/openclaw/security/advisories/GHSA-vfg3-pqpq-93m4 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dac87 · Patch
• https://osv.dev/vulnerability/GHSA-p6j4-wvmc-vx2h · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35637 · Security Note
• https://osv.dev/vulnerability/GHSA-vfg3-pqpq-93m4 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://twitter.com/CVEnew/status/2042364319707398277 · Twitter Post
• https://vulncheck.com/advisories/openclaw-premature-cite-expansion-before-authorization-in-channel-and-dm · Note
• https://twitter.com/infoflowcloud/status/2042366197950214622 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2042459371829956665 · Twitter Post