CVE-2026-35619

MEDIUM 4.3

OpenClaw < 2026.3.24 - Authorization Bypass via HTTP /v1/models Endpoint

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

7th

OpenClaw before 2026.3.24 contains an authorization bypass vulnerability in the HTTP /v1/models endpoint that fails to enforce operator read scope requirements. Attackers with only operator.approvals scope can enumerate gateway model metadata through the HTTP compatibility route, bypassing the stricter WebSocket RPC authorization checks.

CWE	CWE-863
Vendor	openclaw
Product	openclaw
Published	Apr 10, 2026
Last Updated	Apr 13, 2026

Stay Ahead of the Next One

Get instant alerts for openclaw openclaw

Be the first to know when new medium vulnerabilities affecting openclaw openclaw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

OpenClaw / OpenClaw

0 < 2026.3.24

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/openclaw/openclaw/security/advisories/GHSA-68f8-9mhj-h2mp github.com: https://github.com/openclaw/openclaw/commit/06de515b6c42816b62ec752e1c221cab67b38501 vulncheck.com: https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-http-v1-models-endpoint

Credits

🔍 Peng Zhou (@zpbrent)