CVE-2026-35669 - Vulnerability Analysis

Overview

OpenClaw < 2026.3.25 contains a privilege escalation caused by incorrect minting of operator.admin runtime scope in gateway-authenticated plugin HTTP routes, letting attackers gain elevated privileges, exploit requires gateway authentication.

Severity & Score

Impact

Attackers can gain unauthorized administrative privileges, leading to full control over the system.

Mitigation

Update to version 2026.3.25 or later.

References

• https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-gateway-plugin-http-authentication-scope
• https://github.com/openclaw/openclaw/commit/ec2dbcff9afd8a52e00de054b506c91726d9fbbe
• https://github.com/openclaw/openclaw/security/advisories/GHSA-qm2m-28pf-hgjw

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner