CVE-2026-32914
1 advisory.
npm/openclaw CVE-2026-32914: high 8.8, EPSS 0.45%
OpenClaw: Command-authorized non-owners could reach owner-only `/config` and `/debug` surfaces
Action: Upgrade openclaw to 2026.3.12 or later.
npm i openclaw@2026.3.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.12 | - |
Fixed versions
| 2026.3.12 |
Sources
- osv: GHSA-r7vr-gr74-94p8
- https://github.com/openclaw/openclaw/security/advisories/GHSA-r7vr-gr74-94p8
- https://github.com/openclaw/openclaw/pull/44305
- https://github.com/openclaw/openclaw/commit/08aa57a3de37d337b226ae861f573779f112ff2e
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.3.12
CVE-2026-32914 · published · modified · JSON