CVE-2026-35620
Medium Severity
Description
OpenClaw before 2026.3.24 contains missing authorization vulnerabilities in the /send and /allowlist chat command handlers. The /send command allows non-owner ...
Related Vulnerabilities
- CVE-2026-33551: An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0. LOW
- CVE-2026-34945: Wasmtime has host data leakage with 64-bit tables and Winch MEDIUM
- CVE-2026-33141: Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, an Insecure Direct Object Referenc MEDIUM
- CVE-2026-34988: Wasmtime has data leakage between pooling allocator instances MEDIUM
- CVE-2026-30232: Chartbrew is an open-source web application that can connect directly to databases and APIs and use N/A
Related Coverage
Threat Actors