CVE-2026-35666CWE-706

OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper

High · published April 10, 2026

CVSS v4.0
7.7
EPSS
1%
Percentile
52.6
In the wild
Unconfirmed
What it is

OpenClaw before 2026.3.22 contains an allowlist bypass vulnerability in system.run approvals that fails to unwrap /usr/bin/time wrappers. Attackers can bypass executable binding restrictions by using an unregistered time wrapper to reuse approval state for inner commands.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00698 · 52.6th percentile
Weakness
CWE-706 · Use of Incorrectly-Resolved Name or Reference
Published
2026-04-10T16:03Z
EPSS history
Timeline
  • 10 APR 16:03Z
    OpenClaw < 2026.3.22 - Allowlist Bypass via Unregistered Time Dispatch Wrapper
    cvelistv5