Beveiligingsadvies

CVE-2026-35648

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-10 16:03:12

Laatst bijgewerkt 2026-06-23 16:16:06

Toegewezen door VulnCheck

CVSS-score 3.7

Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.22 contains a policy bypass vulnerability where queued node actions are not revalidated against current command policy when delivered. Attackers can exploit stale allowlists or declarations that survive policy tightening to execute unauthorized commands.

← Alle CVE's bekijken Bekijk op cve.org ↗