CVE-2026-35620
Description
OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers. The /send command allows non-owner command-authorized senders to change owner-only session delivery policy settings, and the /allowlist mutating commands fail to enforce operator.admin scope. Attackers with operator.write scope can invoke /send on|off|inherit to persistently mutate the current session's sendPolicy, and execute /allowlist add commands to modify config-backed allowFrom entries and pairing-store allowlist entries without proper admin authorization.
How to fix
- openclaw openclaw2026.3.24 or later
- openclaw2026.3.24 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openclaw openclaw | v < 2026.3.24 | 2026.3.24 |
| openclawnpm | v < 2026.3.24 | 2026.3.24 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.