CVE-2026-35659: OpenClaw < 2026.3.22 - Unresolved Service Metadata Routing via Bonjour and DNS-SD Discovery
OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution failed. Attackers can exploit unresolved hints to steer routing decisions to unintended targets by providing malicious discovery metadata.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.3.22
Event History
Frequently Asked Questions
What is the severity of CVE-2026-35659?
The severity of CVE-2026-35659 is classified as moderate due to its potential impact on service routing and security.
How do I fix CVE-2026-35659?
To fix CVE-2026-35659, update OpenClaw to version 2026.3.22 or later where the vulnerability has been resolved.
What versions of OpenClaw are affected by CVE-2026-35659?
OpenClaw versions prior to 2026.3.22 are affected by CVE-2026-35659.
What type of vulnerability is CVE-2026-35659?
CVE-2026-35659 is a service discovery vulnerability via Bonjour and DNS-SD which can disrupt CLI routing.
Can CVE-2026-35659 be exploited remotely?
Yes, CVE-2026-35659 can potentially be exploited remotely if an attacker can inject malicious TXT metadata.