npm/openclaw: medium
OpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows
Action: Upgrade openclaw to 2026.2.19 or later.
npm i openclaw@2026.2.19Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.2.19 | - |
Fixed versions
| 2026.2.19 |
Sources
- osv: GHSA-2hm8-rqrm-xfjq
- https://github.com/openclaw/openclaw/security/advisories/GHSA-2hm8-rqrm-xfjq
- https://github.com/openclaw/openclaw/commit/2777d8ad91ef1e8a7c6f5b4b18f8507be7d02914
- https://github.com/openclaw/openclaw/commit/3d7ad1cfca4daaa84cd553e843e0e08fa6201349
- https://github.com/openclaw/openclaw/commit/a40c10d3e24568b1e2947c104484be74bf66b8d2
- https://github.com/openclaw/openclaw
published · modified · JSON