tocsin

CVE-2026-32051

1 advisory.

npm/openclaw CVE-2026-32051: high, EPSS 0.56%

OpenClaw's authorization mismatch allowed write-scope agent runs to reach owner-only tools

Action: Upgrade openclaw to 2026.3.1 or later.

npm i openclaw@2026.3.1

Affected

introducedfixedlast affected
02026.3.1-

Fixed versions

2026.3.1

Sources

CVE-2026-32051 · published · modified · JSON