Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.9

OpenClaw before 2026.3.22: Attackers can fake tool identities to bypass security

CVE-2026-35655 · published 6 months ago
Summary

OpenClaw versions before 2026.3.22 may allow attackers to pretend to be legitimate tools, suppressing safety warnings and security restrictions. This can lead to unauthorized actions being taken. Update to version 2026.3.22 or later to fix this issue.

Original advisory text
OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers can spoof tool i...
OpenClaw before 2026.3.22 contains an identity spoofing vulnerability in ACP permission resolution that trusts conflicting tool identity hints from rawInput and metadata. Attackers can spoof tool identities through rawInput parameters to suppress dangerous-tool prompting and bypass security restrictions.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.9 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-807Reliance on Untrusted Inputs in a Security Decision
Timeline
Published10 Apr 2026
Updated4 Nov 2026
First seen10 Apr 2026
Sources
CVE-2026-35655 · NVD
Track software like this
Free during beta