CVE-2026-35649: OpenClaw authorization bypass via empty allowlist reconciliation

Executive brief

OpenClaw is a software package that includes Tlon settings for managing access controls. A vulnerability was found where setting an empty allowlist—intended to block all access—was incorrectly treated as if no settings were configured at all. This could result in the system failing to revoke access as intended, potentially allowing unauthorized users to maintain access to restricted resources.

Technical details

An authorization bypass vulnerability exists in OpenClaw's Tlon settings reconciliation logic. The system incorrectly interpreted an explicit empty allowlist (intended as a 'deny-all' state) as an 'unset' or null value. This logic error occurs in the monitor component (extensions/tlon/src/monitor/index.ts), where the reconciliation process would fail to enforce a revocation if the allowlist was cleared. An attacker with low privileges could potentially exploit this to bypass intended access restrictions. The issue is fixed in version 2026.3.22 by ensuring empty allowlists are honored as authoritative deny-all configurations.

Affected products

• openclaw openclaw < 2026.3.22

Timeline

• 2026-03-24: patched: Fix shipped in v2026.3.22
• 2026-03-26: disclosed: GitHub Advisory published

References

• https://api.github.com/users/zpbrent
• https://github.com/zpbrent
• https://api.github.com/users/zpbrent/gists%7B/gist_id%7D
• https://api.github.com/users/zpbrent/repos
• https://avatars.githubusercontent.com/u/834641?v=4
• https://api.github.com/users/zpbrent/events%7B/privacy%7D