PT-2026-31962

CVE-2026-35651

Published

2026-03-29

Updated

2026-04-10

Description by

CVSS 4.0

5.3

Medium

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.13 through 2026.3.24

Description OpenClaw contains an ANSI escape sequence injection vulnerability in approval prompts. Attackers can spoof terminal output through malicious tool titles, as untrusted tool metadata can carry ANSI control sequences into approval prompts and permission logs. This allows manipulation of displayed information.

Recommendations Update to version 2026.3.25 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Keensecuritylab

Nathan

Vendors

Affected products

Weakness enumeration

CWE-150: Improper Neutralization of Escape, Meta, or Control Sequences