npm/openclaw CVE-2026-32982: high 7.5, EPSS 0.43%
OpenClaw Telegram media fetch errors exposed bot tokens in logged file URLs
Action: Upgrade openclaw to 2026.3.13 or later.
npm i openclaw@2026.3.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.13 | - |
Fixed versions
| 2026.3.13 |
Sources
- osv: GHSA-xwcj-hwhf-h378
- nvd: CVE-2026-32982
- https://github.com/openclaw/openclaw/security/advisories/GHSA-xwcj-hwhf-h378
- https://github.com/openclaw/openclaw/commit/7a53eb7ea8295b08be137e231c9a98c1a79b5cd5
- https://github.com/openclaw/openclaw
CVE-2026-32982 · published · modified · JSON