CVE-2026-43572
1 advisory.
npm/openclaw CVE-2026-43572: low, EPSS 0.40%
OpenClaw: Microsoft Teams SSO invoke handler missed sender authorization checks
Action: Upgrade openclaw to 2026.4.14 or later.
npm i openclaw@2026.4.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 2026.4.10 | 2026.4.14 | - |
Fixed versions
| 2026.4.14 |
Sources
- osv: GHSA-gc9r-867r-j85f
- https://github.com/openclaw/openclaw/security/advisories/GHSA-gc9r-867r-j85f
- https://github.com/openclaw/openclaw/pull/66033
- https://github.com/openclaw/openclaw/commit/80b1fa17bfc3f6a668492f0326ea52f48bb89776
- https://github.com/openclaw/openclaw
CVE-2026-43572 · published · modified · JSON