CVE-2026-35643

creationtimestamp| type| source ---|---|--- 2026-04-10 19:30:36+00:00| published-proof-of-concept| Telegram/-hUuw8aTFVWSQYPf3qEKqcT3Zmmt4K4bisrN5sFAqL07rbc 2026-04-11 09:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mj7hxnfcaf2h 2026-04-13 21:07:07+00:00| seen|...

@agentholdings/agent-passport (=0.1.0), @themw123/opencode-copilot-account-switcher (>=0.14.39 <=0.14.42) +5 more potentially affected by CVE-2026-35643 via openclaw (>=2026.3.22 <=2026.3.23-1)

openclaw NPM version =2026.3.22, =0.14.39, =0.1.1, =0.0.7, =0.14.6, =0.1.0, =0.1.5 Source cves: CVE-2026-35643 Source advisory: SNYK:JS-OPENCLAW-15789466...

vantuz (>=3.3.2 <=3.3.7) potentially affected by CVE-2026-35643 via openclaw (=0.0.1)

openclaw NPM version =0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on openclaw and may be impacted: - vantuz =3.3.2, =3.3.7 Source cves: CVE-2026-35643 Source advisory: OSV:GHSA-CXMW-P77Q-WCHG...