Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth decisions. Attackers can exploit this timing vulnerability to access or manipulate content before proper authorization validation occurs.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure2 |
| 2026-04-10 | 1 | Disclosure1 |
CVE-2026-35637 Cite Expansion Authorization Bypass in OpenClaw Before 2026.3.22 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35637
Post summary
The message discloses CVE‑2026‑35637, describing an authorization bypass flaw in OpenClaw (versions before 2026.3.22) but provides no proof of concept, exploit code, active exploitation evidence, or patch details.
🚨*CVE* CVE-2026-35637 OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth d… https://www.cve.org/CVERecord?id=CVE-2026-35637 ----- Traducción: CVE-2026-35637 Ope… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑35637, describing a pre‑authorization check bypass in OpenClaw, but does not provide PoC, exploit, or patch information.
CVE-2026-35637 OpenClaw before 2026.3.22 performs cite expansion before completing channel and DM authorization checks, allowing cite work and content handling prior to final auth d… https://www.cve.org/CVERecord?id=CVE-2026-35637
Post summary
The post provides a technical description of CVE‑2026‑35637 in OpenClaw, highlighting a pre‑auth expansion flaw, but offers no evidence of exploitation, PoC, or patch.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |