CVE-2026-35664
OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks
概要
OpenClaw < 2026.3.25 - DM Pairing Bypass via Legacy Card Callbacks
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
OpenClaw before 2026.3.25 contains an authentication bypass vulnerability in raw card send surface that allows unpaired recipients to mint legacy callback payloads. Attackers can send raw card commands to bypass DM pairing restrictions and reach callback handling without proper authorization.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com