CVE-2026-43535
Summary
by MITRE • 05/05/2026
OpenClaw before 2026.4.14 contains an authorization context reuse vulnerability in collect-mode queue batches that allows messages from different senders to inherit the final sender's authorization context. Attackers can exploit this by sending multiple queued messages to drain batches using a more privileged sender's context, causing earlier messages to execute with elevated permissions.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 05/09/2026
Xxx Xxxxxxxx Xxxxxxxx Xxxxxx Xxxxx Xx Xxxxxxx Xxxx.x.xx Xxxxxxxx X Xxxxxxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxx Xxxxxxxxxxxxx Xxxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxx Xx Xxxxxxx Xxxxxxxxxx Xxxxxx Xxxxxxx-xxxx Xxxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxx Xxxxxxxx Xx Xxxxxxxxxxxxx Xxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxxx Xxxxx Xxx Xxxxxx Xxxxx Xx Xxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxx' Xxxxxxxxxxx. Xxx Xxxx Xxxxxx Xxxxxxxxxxxx Xxxxxx Xxx Xxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxx, Xxxxx Xxxxxxxxxxxxx Xxxxxxxx Xxx Xxx Xxxxxxxx Xxxxx Xx Xxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxx Xxxxxx Xxx Xxxx Xxxxx Xxxxxxxxxx Xxxxx. Xxxx Xxxxxx Xxxxxxxxx Xxxxxxx X Xxxxxxxx Xxxxx Xxxxxxxx Xxxxxxxxx Xxxxxxxxxxxx Xxxxxx X Xxxxx Xxx Xxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxx Xx Xxx Xxxxx Xxxxxx Xxxxxx Xxxx Xxxxxxxxxxx Xxxxx Xxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxxxx Xx Xxxxxxx X Xxxxxxxxxxx Xxxx Xx Xxx Xxxxx Xxxxxxxxxx Xxxxxxxx Xx Xxxxxxxxx Xxxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxx Xxxx Xxx Xxxxxxxxx Xxxxxxxx Xx Xxx Xxxx Xxxxx. Xxxx Xxx Xxxxxx Xxxxxxxxx Xxxxx Xxxxxxxx, Xx Xxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxx Xxxx Xxx Xxxx Xxxxxxx Xx Xxx Xxxxxxxx Xxxxxx Xxxx Xxxxxxxxxx Xxxx Xxxxxxx Xxxxxxx Xxx Xxx Xxxxxx Xxxxxxxxxxx. Xxxx Xxxxxxx X Xxxxxxxxx Xxxxxx Xxxxx Xxxxxxx Xxxxxxxx Xx Xxx Xxxxx, Xxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxx'x Xxxxxxxxxx, Xxxxxxx Xxxx Xxx Xxxxxxxx Xxxxxxxxxxx Xx Xxx Xxxxx Xxxxxx. Xxx Xxxxxxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xx Xxx Xxxxxxxxxxxxx Xxxxx, Xxxxxxxxx Xxxxxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxxx Xxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxx Xx Xxxxxxx.
Xxxx Xx Xxxxxxxxxxx Xxxxxx Xxxxxxxxxxx, Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxxxx Xxxx Xxx Xxxxxx Xx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxxx Xxxx Xxx Xxxxxx Xxxxxxxxx. Xxxxxxxxx Xxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxxx Xxxxx Xxxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx, Xxxxxxxx Xxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxxxxxxx Xxx Xxxxxx Xxxx Xxxxx Xxxxxxxx Xx Xxxxxxx Xx Xxx Xxxxxxx Xxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxx Xx Xxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxx Xxx Xxx Xxxxxxxxxxx Xxxx Xx Xxxx Xxxxxxxxxxxx, Xxxxxx Xxxxxxxxxx, Xx Xxxxxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxx. Xxxx Xxxx Xx Xxxxxxxxxxxxx Xx Xxxxxxxxxx Xxxxx Xxx-xxx Xx Xxxxxxxx Xxxxxx Xxxxxxx, Xxxxxxxxxxxx Xxxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxx Xxxxx Xxxxxxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxx Xxxx Xxx&xx Xxxxxxxxx Xxxxx.xxx Xxx Xxxxx Xxxxxxxx Xxx Xxxxx Xxx Xxxxxxxxxx Xxxxxxxxxx, Xx Xx Xxxxxxxx Xxxxxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxxxx.
Xxx Xxxxxxxxxx Xxxxxxxxxx Xxx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxxxx. Xxxxxxx Xxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx Xx Xxxx Xxxxxxx'x Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx, Xxxxxxxx Xxxx Xx Xxxxxxx Xxxxx Xxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxx Xxx Xxxx Xxxxx Xxxxx. Xxxx Xxx Xx Xxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxx Xxxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxxxxx Xx Xxxxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxx Xxx Xxxx Xxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxxxx Xxxx Xxxxx Xxxxx Xxxxx Xxx Xxxxxxx Xxxxxxxx Xxxxxx Xxxxxxxx Xx Xxxxx Xxxxxxxxxx Xxxxxxxxxx. Xxxxxxxxxxxx, Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxxxx Xx Xxxxxxxx Xx Xxxxxx Xxxxxxx Xxxxx Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxxx. Xxx Xxx Xxxxxx Xxxxxxx Xxxxxxxx Xxx Xxxxx Xxxxx Xxxxxxxxxx Xxxxx Xx Xxxxxx Xxxxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxx, Xxxxxxxxxxx Xxxxxxx Xxx Xxxxxxxxxxxxxx Xx X Xxxxxxx-xxxxx Xxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxx Xxxxxxx Xxxxxxx Xxx Xxx Xxxxxx Xxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxxx Xxxxxxx Xxxx Xxxxxxxxxx Xxxxxxxx Xx Xxx Xxxxx.