Beveiligingsadvies

CVE-2026-35649

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-10 16:03:13

Laatst bijgewerkt 2026-06-23 16:16:07

Toegewezen door VulnCheck

CVSS-score 6.5

Status PUBLISHED

Beschrijving

OpenClaw before 2026.3.22 contains a settings reconciliation vulnerability that allows attackers to bypass intended deny-all revocations by exploiting empty allowlist handling. The vulnerability treats explicit empty allowlists as unset during reconciliation, silently undoing intended access control denials and restoring previously revoked permissions.

← Alle CVE's bekijken Bekijk op cve.org ↗