GitHub Advisoryadvisory · npm

GHSA-wj55-88gf-x564 OpenClaw may have stale policy enforcement for queued node actions

LOW Published 2026-03-26 Modified 2026-04-15 Official page ↗
Aliases
CVE-2026-35648
Ecosystem
npm
Packages
openclaw
Severity
Low
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-367, CWE-863
Reviewed
2026-03-26

Affected packages

• npm openclaw: < 2026.3.22 → fixed in 2026.3.22

Description

Summary Queued node actions were not revalidated against current command policy when later delivered, so stale allowlists or declarations could survive policy tightening. Affected Packages / Versions • Package: `openclaw` (npm) • Affected: = 2026.3.22 • Latest released tag checked: `v2026.3.23-2` (`630f1479c44f78484dfa21bb407cbe6f171dac87`) • Latest published npm version checked: `2026.3.23-2` Fix Commit(s) • `ec2c6d83b9f5f91d6d9094842e0f19b88e63e3e2` Release Status The fix shipped in `v2026.3.22` and remains present in `v2026.3.23` and `v2026.3.23-2`. Code-Level Confirmation • src/gateway/server-methods/nodes.ts now revalidates queued actions against the current allowlist and declared command set at delivery time. • src/gateway/server-methods/nodes.invoke-wake.test.ts includes the shipped stale-queue regression coverage. OpenClaw thanks @zpbrent for reporting.

Related

Alias · CVE (1)

  • CVE-2026-35648 OpenClaw before 2026.3.22 contains a policy bypass vulnerability where queued node actions are not revalidated against current command… vulnerability

Weakness · CWE (2)

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness
  • CWE-863 Incorrect Authorization weakness

References