Openclaw cli: OpenClaw: Tlon cite expansion happens before channel and DM authorization is complete (CVE-2026-35637)

The OpenClaw CLI (npm package 'openclaw') had a security flaw identified as CVE-2026-35637, where the cite expansion process was executed before the completion of channel and direct message authorization. This premature expansion allowed cite work and content handling to occur before the final authorization decision, potentially bypassing intended access controls. The vulnerability affects versions from 2026.1.29 up to but not including 2026.3.24. The issue was resolved by deferring cite expansion until after authorization is confirmed, as implemented in commits 3cbf932413e41d1836cb91aed1541a28a3122f93 and ebee4e2210e1f282a982c7ef2ad79d77a572fc87. The fix shipped in version 2026.3.22 and remains in subsequent releases.

The vulnerability allowed cite expansion and content handling to occur before authorization was fully verified, which could lead to unauthorized content processing or exposure within channels or direct messages. However, there is no indication of active exploitation in the wild. The impact is limited to the premature authorization check bypass during cite expansion.

A fix is available and has been officially released in OpenClaw CLI version 2026.3.22 and later. Users should upgrade to version 2026.3.22 or newer to mitigate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.