npm/openclaw CVE-2026-26326: medium 4.3, EPSS 0.34%
OpenClaw skills.status could leak secrets to operator.read clients
Action: Upgrade openclaw to 2026.2.14 or later.
npm i openclaw@2026.2.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.2.14 | - |
Fixed versions
| 2026.2.14 |
Sources
- osv: GHSA-8mh7-phf8-xgfm
- nvd: CVE-2026-26326
- https://github.com/openclaw/openclaw/security/advisories/GHSA-8mh7-phf8-xgfm
- https://github.com/openclaw/openclaw/commit/d3428053d95eefbe10ecf04f92218ffcba55ae5a
- https://github.com/openclaw/openclaw/commit/ebc68861a61067fc37f9298bded3eec9de0ba783
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.2.14
CVE-2026-26326 · published · modified · JSON