7.6

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43535

CVE-2026-43535: OpenClaw < 2026.4.14 - Authorization Context Reuse in Collect-Mode Queue Batches

OpenClaw before 2026.4.14 contains an authorization context reuse vulnerability in collect-mode queue batches that allows messages from different senders to inherit the final sender's authorization context. Attackers can exploit this by sending multiple queued messages to drain batches using a more privileged sender's context, causing earlier messages to execute with elevated permissions.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43535

CVE-2026-43535:

7.6

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.14	2026.4.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided patch commit reveals that the vulnerability is located in the scheduleFollowupDrain function within the src/auto-reply/reply/queue/drain.ts file. The vulnerability, as described, is that collect-mode queue batches could reuse the last sender's authorization context. The patch addresses this by introducing a mechanism to split the queue items into groups based on their authorization context before processing them. The core of the vulnerability was that the function used to take the entire queue (items) and apply the context of the very last run (items.at(-1)?.run) to the whole batch. The fix involves looping through authorization-based groups (authGroups) and applying the context of the last run within that specific group (groupItems.at(-1)?.run). Therefore, scheduleFollowupDrain is the vulnerable function as it contained the logic that improperly handled authorization contexts for message batches.

Vulnerable functions

scheduleFollowupDrain

src/auto-reply/reply/queue/drain.ts

The vulnerability lies in the `scheduleFollowupDrain` function, which is responsible for processing queued messages in 'collect' mode. Before the patch, this function would take all items from the queue and use the authorization context of the last item's run (`items.at(-1)?.run`) to execute the entire batch. This could lead to a privilege escalation scenario where messages from unprivileged users are processed with the authorization context of a privileged user if the privileged user's message is the last one in the batch.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.