npm/openclaw CVE-2026-32919: medium 6.1, EPSS 0.14%

OpenClaw: Write-scoped callers could reach admin-only session reset logic through `agent`

Action: Upgrade openclaw to 2026.3.11 or later.

npm i openclaw@2026.3.11

Affected

Fixed versions

Sources

• osv: GHSA-jf6w-m8jw-jfxc
• https://github.com/openclaw/openclaw/security/advisories/GHSA-jf6w-m8jw-jfxc
• https://github.com/openclaw/openclaw
• https://github.com/openclaw/openclaw/releases/tag/v2026.3.11

CVE-2026-32919 · published 2026-03-13T15:48:11Z · modified 2026-07-08T07:56:35.445017794Z · JSON