Openclaw cli: OpenClaw: Non-owner command-authorized sender can change the owner-only `/send` session delivery policy (CVE-2026-35620)

CVE-2026-35620 is an improper authorization vulnerability in OpenClaw CLI affecting versions >=2026.1.29 and <2026.3.24. The issue arises because the handler for the `/send` command checks only if the sender is command-authorized, not whether the sender is the owner, allowing non-owner authorized users to persistently modify the session's sendPolicy. This bypasses the documented owner-only restriction on the `/send on|off|inherit` commands, enabling lower-trust users to alter reply delivery behavior for the current session. The vulnerability was verified in the source code at specific commits and release tags, and the vendor has fixed the issue in version 2026.3.24.

The vulnerability allows a non-owner but command-authorized sender to persistently change the session delivery policy by invoking `/send on|off|inherit`. This can disable reply delivery, re-enable it after owner-disabled, or remove session overrides, affecting the communication flow in the current session. There is no direct impact on confidentiality, but integrity and availability of session replies are affected. The vulnerability does not lead to code execution, sandbox escape, or cross-host compromise.

A patch is available and has been released in OpenClaw version 2026.3.24. Users should upgrade to this version or later to remediate the vulnerability. No additional mitigation actions are required as the fix addresses the authorization bypass directly.