@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers

Summary Before v2026.3.23, the Gateway agent RPC accepted /reset and /new for callers with only operator.write, even though the direct sessions.reset RPC correctly requires operator.admin. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.23 - Latest released tag checked:...

GHSA-WQ58-2PVG-5H4F OpenClaw: Gateway agent /reset exposes admin session reset to operator.write callers

Summary Before v2026.3.23, the Gateway agent RPC accepted /reset and /new for callers with only operator.write, even though the direct sessions.reset RPC correctly requires operator.admin. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.23 - Latest released tag checked:...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35660 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

Missing Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Missing Authorization in the agent process when the /reset or /new endpoints are accessed with only operator.write permissions. An attacker can gain unauthorized administrative access by...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35634 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication

Summary Before v2026.3.23, Canvas and A2UI loopback requests could bypass Canvas bearer-or-capability authentication because authorizeCanvasRequest... treated isLocalDirectRequest... as an unconditional allow path. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.23 -...

Improper Authentication

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Improper Authentication via the authorizeCanvasRequest function. An attacker can gain unauthorized access to HTTP and WebSocket endpoints by sending local-direct loopback requests that...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35634 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

GHSA-6MQC-JQH6-X8FC OpenClaw: Gateway Canvas local-direct requests bypass Canvas HTTP and WebSocket authentication

Summary Before v2026.3.23, Canvas and A2UI loopback requests could bypass Canvas bearer-or-capability authentication because authorizeCanvasRequest... treated isLocalDirectRequest... as an unconditional allow path. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.3.23 -...

Replay Attack

Overview @openclaw/voice-call is an OpenClaw voice-call plugin Affected versions of this package are vulnerable to Replay Attack due to improper derivation of the replay key in the webhook-security.ts process. An attacker can bypass replay protection and submit multiple authenticated requests by...

OpenClaw: Plivo V2 verified replay identity drifts on query-only variants

Summary Before v2026.3.23, the Plivo V2 verification path treated query-only variants of the same signed request as fresh verified work. Plivo V2 signatures authenticate baseUrl + nonce, but the replay key was derived from the full verification URL including the query string, so unsigned query-on...

GHSA-CG6C-Q2HX-69H7 OpenClaw: Plivo V2 verified replay identity drifts on query-only variants

Summary Before v2026.3.23, the Plivo V2 verification path treated query-only variants of the same signed request as fresh verified work. Plivo V2 signatures authenticate baseUrl + nonce, but the replay key was derived from the full verification URL including the query string, so unsigned query-on...

@agentholdings/agent-passport (0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39, <=0.14.42) +3 more potentially affected by CVE-2026-35618 via openclaw (2026.3.22)

openclaw NPM version 2026.3.22 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - @agentholdings/agent-passport 0.1.0 - @themw123/opencode-copilot-account-switcher =0.14.39, =0.1.1, =0.14.6, =0.1.0, =0.1.5 Source cves:...

Directory Traversal

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Directory Traversal via incomplete validation in the isLikelyLocalPath and isValidMedia functions. An attacker can access sensitive files outside the intended application sandbox by...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-32846 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-32846 Source advisory: SNYK:JS-OPENCLAW-15789429...

GHSA-HGGM-X7R9-MM7V OpenClaw is vulnerable to Path Traversal through path validation bypass

OpenClaw through 2026.3.23 fixed in commit 4797bbc contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath and isValidMedia functions. Attackers can exploit incomplete validation and the...

OpenClaw is vulnerable to Path Traversal through path validation bypass

OpenClaw through 2026.3.23 fixed in commit 4797bbc contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath and isValidMedia functions. Attackers can exploit incomplete validation and the...

@agentholdings/agent-passport (>=0.1.0, <=0.1.5), @chrysb/alphaclaw (0.8.3-beta.1) +11 more potentially affected by CVE-2026-32846 via openclaw (>=2026.3.22, <=2026.3.24-beta.2)

openclaw NPM version =2026.3.22, =0.1.0, =2026.3.25, =2026.3.24-3, =0.14.39, =0.1.1, =2.0.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-32846 Source advisory: OSV:GHSA-HGGM-X7R9-MM7V...

CVE-2026-32846

OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the isLikelyLocalPath and isValidMedia functions. Attackers can exploit incomplete validation and the allowBareFilename bypass to...