CVE-2026-35652 is an authorization bypass in OpenClaw interactive callback dispatch, scored 6.5 (Medium) in the CVE record. Senders who are not on the allowlist can run action handlers. The GitHub advisory names the Mattermost integration and says 2026.3.22 fixes it.
What's affected
- Product: OpenClaw (npm package
openclaw) - Affected versions: before 2026.3.22
- Fixed version: 2026.3.22 or later, per the GitHub advisory
- Affected area: interactive callback dispatch, which the advisory ties to the Mattermost integration
The advisory says the fix shipped in v2026.3.22 and is still present in v2026.3.23 and v2026.3.23-2. The record does not say the flaw is exploited in the wild, and the CVE is not in the CISA Known Exploited Vulnerabilities catalog.
How to check if you're exposed
npm ls -g openclaw
npm ls openclaw
Run the one that matches how you installed it. If the version is older than 2026.3.22 and you use the Mattermost integration, you are in the affected area. Also check your sender allowlist settings, since the flaw lets a sender skip that policy for callbacks.
What to do now
- Upgrade OpenClaw to 2026.3.22 or later.
- Review the allowlist for Mattermost senders and confirm it matches your intent.
- Review which actions your interactive callbacks can trigger, and cut back anything with side effects you do not need.
- Look at recent logs for callback actions from senders that are not on the allowlist.
Why it matters
The record files this under CWE-696, incorrect behavior order. The advisory explains the practical form: the action handler ran before the normal sender authorization checks were finished. The fix requires authorization before the callback is dispatched, and routes it through the same sender and allowlist policy as normal incoming messages.
The score is moderate because the effect is limited to the actions the handlers offer. Still, an allowlist that has an unlisted side door is not doing its job. When you add a new path into a system, send it through the same checks as the old one.
Quick check
Which integration is involved?
The GitHub advisory describes the Mattermost interactive callback dispatch.
Which version fixes it?
2026.3.22, according to the advisory.
Sources
Last reviewed: 19 October 2026.
