Vulnerability Description
OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Attackers can exploit this timing vulnerability to access or manipulate content before proper authorization validation occurs.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.3.22 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/commit/3cbf932413e41d1836cb91aed1541a28a312Patch
- https://github.com/openclaw/openclaw/commit/630f1479c44f78484dfa21bb407cbe6f171dPatch
- https://github.com/openclaw/openclaw/commit/ebee4e2210e1f282a982c7ef2ad79d77a572Patch
- https://github.com/openclaw/openclaw/security/advisories/GHSA-vfg3-pqpq-93m4Vendor Advisory
- https://www.vulncheck.com/advisories/openclaw-premature-cite-expansion-before-auThird Party Advisory
FAQ
What is CVE-2026-35637?
CVE-2026-35637 is a vulnerability with a CVSS score of 7.3 (HIGH). OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Attackers can exploit th...
How severe is CVE-2026-35637?
CVE-2026-35637 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35637?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.