CVE-2026-34512
1 advisory.
npm/openclaw CVE-2026-34512: high
OpenClaw: Gateway HTTP /sessions/:sessionKey/kill Reaches Admin Kill Path Without Caller Scope Binding
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2026.3.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-9p93-7j67-5pc2
- https://github.com/openclaw/openclaw/security/advisories/GHSA-9p93-7j67-5pc2
- https://github.com/openclaw/openclaw/commit/02cf12371f9353a16455da01cc02e6c4ecfc4152
- https://github.com/openclaw/openclaw
CVE-2026-34512 · published · modified · JSON