CVE-2026-32064
1 advisory.
npm/openclaw CVE-2026-32064: high 7.7, EPSS 0.52%
OpenClaw's andbox browser noVNC observer lacked VNC authentication
Action: Upgrade openclaw to 2026.2.21 or later.
npm i openclaw@2026.2.21Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.2.21 | - |
Fixed versions
| 2026.2.21 |
Sources
- osv: GHSA-25gx-x37c-7pph
- https://github.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pph
- https://nvd.nist.gov/vuln/detail/CVE-2026-32064
- https://github.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01
- https://github.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661
- https://github.com/openclaw/openclaw
- https://www.vulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer
CVE-2026-32064 · published · modified · JSON