CVE-2026-35674CWE-863

OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route

High · published May 29, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
38.2
In the wild
Unconfirmed
What it is

OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.write scope can deliver commands through inherited external routes to bypass operator.approvals and operator.admin scope requirements, enabling unauthorized plugin, config, MCP, allowlist, and ACP mutations.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00451 · 38.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-05-29T15:11Z
EPSS history
Timeline
  • 29 MAY 15:11Z
    OpenClaw < 2026.5.18 - Scope Bypass via Inherited chat.send Route
    cvelistv5