Beveiligingsadvies

CVE-2026-35642

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-09 21:27:09
Laatst bijgewerkt 2026-06-23 16:16:02
Toegewezen door VulnCheck
CVSS-score 5.3
Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.25 contains an authorization bypass vulnerability where group reaction events bypass the requireMention access control mechanism. Attackers can trigger reactions in mention-gated groups to enqueue agent-visible system events that should remain restricted.