# CVE-2026-35674: OpenClaw scope bypass in Gateway chat.send route

Source: https://junglewise.ai/threats/cve-2026-35674-openclaw-scope-bypass-in-gateway-chat-send-route  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-29. Updated: 2026-05-29  
License: CC BY 4.0 with a link back

CVE-2026-35674 · Severity: high · CVSS 8.8 · Published 2026-05-29

OpenClaw is a platform used for managing gateway communications and command execution. A security flaw in its chat routing system allows users with limited permissions to bypass security restrictions and execute high-level administrative commands. This could lead to unauthorized changes to system configurations, security allowlists, and the installation of malicious plugins, potentially compromising the entire platform's integrity and data.

Technologies: [openclaw (npm)](https://junglewise.ai/threats/technologies/npm-openclaw), [Openclaw](https://junglewise.ai/threats/technologies/openclaw). Vendors: [npm](https://junglewise.ai/threats/vendors/npm), [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-35674 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-35674 being exploited in the wild.

**How severe is CVE-2026-35674?** High severity, with a CVSS score of 8.8, published 29 May 2026.

**Which products and versions are affected?** openclaw (npm) SEMVER:introduced=0,fixed=2026.5.18; Openclaw < 2026.5.18.

**Is there a fix for CVE-2026-35674?** Yes. openclaw (npm): upgrade to 2026.5.18 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-35674 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-35674?** Check whether you run openclaw (npm) or Openclaw at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- openclaw (npm): upgrade to 2026.5.18 or later

  ```sh
  npm install openclaw@2026.5.18
  ```


## Technical details

A scope bypass vulnerability exists in OpenClaw's Gateway 'chat.send' route due to incorrect authorization (CWE-863) when handling inherited external routes. An attacker with 'operator.write' privileges can deliver commands through these inherited routes, causing the system to evaluate them as external-channel commands while retaining the lower Gateway client scopes. This allows the attacker to bypass 'operator.approvals' and 'operator.admin' scope requirements. Successful exploitation enables unauthorized mutations of plugins, configurations, MCP, allowlists, and ACP. The issue is fixed in version 2026.5.18.

## Affected products

- OpenClaw OpenClaw < 2026.5.18

## Identifiers

- CVE-2026-35674
- GHSA-hw9r-h9mr-4jff

## Timeline

- 2026-05-28: advisory: GitHub Security Advisory GHSA-hw9r-h9mr-4jff published
- 2026-05-29: disclosed: NVD publication of CVE-2026-35674
- 2026-05-18: patched: First stable patched version released

## References

- [https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff](https://github.com/openclaw/openclaw/security/advisories/GHSA-hw9r-h9mr-4jff)
- [https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route](https://www.vulncheck.com/advisories/openclaw-scope-bypass-via-inherited-chat-send-route)

## Related threats

- [OpenClaw incorrect authorization in mcp.app.view method](https://junglewise.ai/threats/cve-2026-102807-openclaw-before-2026-9-4-contains-an-incorrect-authorization)
- [OpenClaw incorrect authorization in Gateway media root allowlist](https://junglewise.ai/threats/cve-2026-102806-openclaw-before-2026-9-5-contains-an-incorrect-authorization)
- [OpenClaw exec approval bypass in Google Meet node commands](https://junglewise.ai/threats/cve-2026-100599-openclaw-versions-2026-5-1-through-2026-7-0-fail-to-apply-the)
- [OpenClaw Signal approval reaction binding logic error](https://junglewise.ai/threats/cve-2026-100598-openclaw-npm-package-openclaw-before-2026-7-1-incorrectly-binds)
- [OpenClaw time-of-check time-of-use race condition in filesystem operations](https://junglewise.ai/threats/cve-2026-100597-openclaw-npm-package-openclaw-before-2026-7-1-is-vulnerable-to-a)