CVE-2026-35637CWE-696

OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM

Medium · published April 9, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Attackers can exploit this timing vulnerability to access or manipulate content before proper authorization validation occurs.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00426 · 35.8th percentile
Weakness
CWE-696 · Incorrect Behavior Order
Published
2026-04-09T21:27Z
EPSS history
Timeline
  • 09 APR 21:27Z
    OpenClaw < 2026.3.22 - Premature Cite Expansion Before Authorization in Channel and DM
    cvelistv5