{"id":"EUVD-2026-33337","enisaUuid":"911b793a-8920-3f47-885f-f802485397d9","description":"OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.write scope can deliver commands through inherited external routes to bypass operator.approvals and operator.admin scope requirements, enabling unauthorized plugin, config, MCP, allowlist, and ACP mutations.","datePublished":"May 29, 2026, 3:11:29 PM","dateUpdated":"Sep 24, 2026, 2:17:34 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff\nhttps://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route\n","aliases":"CVE-2026-35674\nGHSA-9wcx-q3fh-qg43\n","assigner":"VulnCheck","epss":0.25,"enisaIdProduct":[{"id":"f99a97b8-8530-383a-8e0c-5e8b403a5d3c","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.5.18"}],"enisaIdVendor":[{"id":"2ca8b9b5-b33f-3556-9dd1-d078f4d7b7d1","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"be41f68a-bc6c-3e0e-aad4-d928defdf5a8","vulnerability":{"id":"CVE-2026-35674","description":"OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.write scope can deliver commands through inherited external routes to bypass operator.approvals and operator.admin scope requirements, enabling unauthorized plugin, config, MCP, allowlist, and ACP mutations.","datePublished":"May 29, 2026, 3:11:29 PM","dateUpdated":"Sep 24, 2026, 2:17:34 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff\nhttps://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route\n","enisa_id":"EUVD-2026-33337\n","assigner":"VulnCheck","epss":0.25,"dataProcessed":"Nov 11, 2026, 7:24:03 AM","vulnerabilityProduct":[{"id":"9d70aa36-1d90-3d79-8020-012850e76b79","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.5.18"}],"vulnerabilityVendor":[{"id":"782739d2-3e08-3116-8a1c-2ab373c8e72e","vendor":{"name":"OpenClaw"}}]}},{"id":"dab97012-1bf1-31f1-b476-6cd37c47e384","vulnerability":{"id":"GHSA-9wcx-q3fh-qg43","description":"OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands. Attackers with operator.write scope can deliver commands through inherited external routes to bypass operator.approvals and operator.admin scope requirements, enabling unauthorized plugin, config, MCP, allowlist, and ACP mutations.","datePublished":"May 29, 2026, 6:31:33 PM","dateUpdated":"May 29, 2026, 6:31:34 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-35674\nhttps://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route\n","enisa_id":"EUVD-2026-33337\n","aliases":"GHSA-9wcx-q3fh-qg43\nCVE-2026-35674\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:48:27 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"89d8cbd3-3284-3fe5-972f-b7152f2ef152","advisory":{"id":"WID-SEC-W-2026-1738","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um Sicherheitsmechanismen zu umgehen, erhöhte Berechtigungen zu erlangen, Informationen offenzulegen, Konfigurationen zu manipulieren, beliebige Befehle oder Code auszuführen sowie interne Systeme über SSRF anzugreifen.","datePublished":"May 28, 2026, 10:00:00 PM","dateUpdated":"Jun 16, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1738.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-1738\n","aliases":"CVE-2026-32906\nCVE-2026-34507\nCVE-2026-35630\nCVE-2026-35673\nCVE-2026-35674\nCVE-2026-53806\nCVE-2026-53807\nCVE-2026-53808\nCVE-2026-53809\nCVE-2026-53810\nCVE-2026-53811\nCVE-2026-53812\nCVE-2026-53813\nCVE-2026-53814\nCVE-2026-53815\nCVE-2026-53816\nCVE-2026-53817\nCVE-2026-53818\nCVE-2026-53819\nCVE-2026-53820\nCVE-2026-53821\nCVE-2026-53822\nCVE-2026-53823\nCVE-2026-53824\nCVE-2026-53825\nCVE-2026-53826\nCVE-2026-53827\nCVE-2026-53828\nCVE-2026-53829\nCVE-2026-53831\nCVE-2026-53832\nCVE-2026-53833\nCVE-2026-53834\nCVE-2026-53835\nCVE-2026-53837\nCVE-2026-53838\nCVE-2026-53839\nCVE-2026-53840\nCVE-2026-53841\nCVE-2026-53842\nCVE-2026-53843\nCVE-2026-53844\nCVE-2026-53845\nCVE-2026-53846\nCVE-2026-53847\nCVE-2026-53848\nCVE-2026-53849\nCVE-2026-53850\nCVE-2026-53851\nCVE-2026-53852\nCVE-2026-53853\nCVE-2026-53854\nCVE-2026-53855\nCVE-2026-53856\nCVE-2026-53857\nCVE-2026-53858\nCVE-2026-53859\nCVE-2026-53860\nCVE-2026-53861\nCVE-2026-53862\nCVE-2026-53863\nCVE-2026-53864\nCVE-2026-53865\nCVE-2026-53866\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"445b3783-839b-3dbc-b20a-1cddd78c32e1","product":{"name":"Open Source OpenClaw","vendor":{"name":"open source"}}}]}}]}