Junglewise Threat Intelligence

OpenClaw incorrect authorization order in Tlon cite expansion

Severity: high · CVSS 7.3 · Published 2026-04-10

Technologies: Openclaw. Vendors: Openclaw.

Executive brief

OpenClaw, a software package used for communication and content handling, contains a flaw in how it processes 'cites' (references to other content) in channels and direct messages. The system performs content expansion and handling before verifying if the user is actually authorized to view that specific channel or message. This could allow an attacker to access or manipulate private content before the security system has a chance to block them.

Technical details

OpenClaw (npm package) before version 2026.3.22 is vulnerable to an incorrect behavior order (CWE-696) in its Tlon extension. The application performs cite expansion and content handling prior to completing authorization checks for channels and direct messages. This timing vulnerability allows a network-based attacker to trigger cite work and potentially access or manipulate sensitive content before the final authorization decision is enforced. The fix involves deferring cite expansion until after authorization is confirmed and ensuring explicit empty-allowlist semantics are honored.

Affected products

  • OpenClaw openclaw < 2026.3.22

Timeline

  • 2026-03-24: advisory: Original internal advisory GHSA-vfg3-pqpq-93m4 published
  • 2026-04-09: disclosed: CVE-2026-35637 assigned and published to NVD
  • 2026-04-10: advisory: Duplicate advisory GHSA-p6j4-wvmc-vx2h published and withdrawn
  • 2026-03-22: patched: Fix released in version 2026.3.22

References

Related threats