CVE-2026-35664

MEDIUM 5.3

OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks

CVSS Score

5.3

EPSS Score

0.1%

EPSS Percentile

18th

OpenClaw before 2026.3.25 contains an authentication bypass vulnerability in raw card send surface that allows unpaired recipients to mint legacy callback payloads. Attackers can send raw card commands to bypass DM pairing restrictions and reach callback handling without proper authorization.

CWE	CWE-288
Vendor	openclaw
Product	openclaw
Published	Apr 10, 2026
Last Updated	Apr 14, 2026

Stay Ahead of the Next One

Get instant alerts for openclaw openclaw

Be the first to know when new medium vulnerabilities affecting openclaw openclaw are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Affected Versions

OpenClaw / OpenClaw

0 < 2026.3.25

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/openclaw/openclaw/security/advisories/GHSA-77w2-crqv-cmv3 github.com: https://github.com/openclaw/openclaw/commit/81c45976db532324b5a0918a70decc19520dc354 vulncheck.com: https://www.vulncheck.com/advisories/openclaw-dm-pairing-bypass-via-legacy-card-callbacks

Credits

🔍 Peng Zhou (@zpbrent)