CVE-2026-35657: OpenClaw: Gateway HTTP Session History Route Bypasses Operator Read Scope

March 29, 2026 (updated April 10, 2026)

Gateway HTTP Session History Route Bypasses Operator Read Scope

References

github.com/advisories/GHSA-5jvj-hxmh-6h6j
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/1c45123231516fa50f8cf8522ba5ff2fb2ca7aea
github.com/openclaw/openclaw/security/advisories/GHSA-5jvj-hxmh-6h6j
nvd.nist.gov/vuln/detail/CVE-2026-35657

Code Behaviors & Features

Detect and mitigate CVE-2026-35657 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →