CVE-2026-41299
1 advisory.
npm/openclaw CVE-2026-41299: high, EPSS 0.35%
OpenClaw: Gateway chat.send ACP-only provenance guard could be bypassed by client identity spoofing
Action: Upgrade openclaw to 2026.3.28 or later.
npm i openclaw@2026.3.28Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.28 | - |
Fixed versions
| 2026.3.28 |
Sources
- osv: GHSA-6xg4-82hv-cp6f
- https://github.com/openclaw/openclaw/security/advisories/GHSA-6xg4-82hv-cp6f
- https://github.com/openclaw/openclaw/commit/4b9542716c26ac77652bcaa0f562043b298b409f
- https://github.com/openclaw/openclaw
CVE-2026-41299 · published · modified · JSON