A vulnerability classified as problematic has been found in OpenClaw up to 2026.3.23. This affects an unknown function of the component Feishu Webhook Endpoint. Performing a manipulation results in asymmetric resource consumption. This vulnerability is cataloged as CVE-2026-35665. It is possible to initiate the attack remotely.
| Vendor | Product | Versions |
|---|---|---|
| openclaw | openclaw | npm/openclaw: < 2026.3.24 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| open source | openclaw | cert_advisory | 90% |
Updated description with new details, changed affected versions to < 2026.3.23, and updated severity to HIGH.
Initial creation
