PT-2026-44898 · Openclaw · Openclaw

Dikai Zou · Published 2026-05-29 · Updated 2026-05-29 · CVE-2026-35674

Mitre

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.write scope can deliver commands through inherited external routes to bypass operator.approvals and operator.admin scope requirements, enabling unauthorized plugin, config, MCP, allowlist, and ACP mutations.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2026-35674

Affected Products

Openclaw

References · 3

• https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-35674 · Security Note
• https://vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route · Note