{"action":"Upgrade openclaw to 2026.2.19 or later.","affected":[{"fixed":"2026.2.19","introduced":"0"}],"component":"openclaw","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2026.2.19"],"ghsa_id":"GHSA-2hm8-rqrm-xfjq","id":"tcs_01M5KET85B14M6J88FK8PGBR4G","modified_at":"2026-03-04T15:10:02.915429Z","published_at":"2026-03-03T21:36:33Z","references":["https://osv.dev/vulnerability/GHSA-2hm8-rqrm-xfjq","https://github.com/openclaw/openclaw/security/advisories/GHSA-2hm8-rqrm-xfjq","https://github.com/openclaw/openclaw/commit/2777d8ad91ef1e8a7c6f5b4b18f8507be7d02914","https://github.com/openclaw/openclaw/commit/3d7ad1cfca4daaa84cd553e843e0e08fa6201349","https://github.com/openclaw/openclaw/commit/a40c10d3e24568b1e2947c104484be74bf66b8d2","https://github.com/openclaw/openclaw"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-2hm8-rqrm-xfjq","url":"https://osv.dev/vulnerability/GHSA-2hm8-rqrm-xfjq"}],"summary":"OpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows"}