CVE-2026-41350
1 advisory.
npm/openclaw CVE-2026-41350: medium, EPSS 0.34%
OpenClaw: `session_status` still bypasses configured `tools.sessions.visibility` for unsandboxed invocations
Action: Upgrade openclaw to 2026.3.31 or later.
npm i openclaw@2026.3.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.3.31 | - |
Fixed versions
| 2026.3.31 |
Sources
- osv: GHSA-fwjq-xwfj-gv75
- https://github.com/openclaw/openclaw/security/advisories/GHSA-fwjq-xwfj-gv75
- https://github.com/openclaw/openclaw/commit/4d369a3400dc9b737fbe8daa63f09d909ce7beb8
- https://github.com/openclaw/openclaw
CVE-2026-41350 · published · modified · JSON