{"action":"Upgrade openclaw to 2026.2.19 or later.","affected":[{"fixed":"2026.2.19","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-32017"],"ecosystem":"npm","epss":0.00274,"exploited":false,"fixed_versions":["2026.2.19"],"ghsa_id":"GHSA-3x3x-h76w-hp98","id":"tcs_01M5KEYJ5YQ0DS1X2HHTABRZK8","modified_at":"2026-03-30T14:06:56.848291Z","published_at":"2026-03-03T21:48:29Z","references":["https://osv.dev/vulnerability/GHSA-3x3x-h76w-hp98","https://github.com/openclaw/openclaw/security/advisories/GHSA-3x3x-h76w-hp98","https://nvd.nist.gov/vuln/detail/CVE-2026-32017","https://github.com/openclaw/openclaw/commit/bafdbb6f112409a65decd3d4e7350fbd637c7754","https://github.com/openclaw/openclaw/commit/cfe8457a0f4aae5324daec261d3b0aad1461a4bc","https://github.com/openclaw/openclaw/commit/fec48a5006eab37c6a5821726ccaeec886486b13","https://github.com/openclaw/openclaw","https://www.vulncheck.com/advisories/openclaw-arbitrary-file-write-via-short-option-bypass-in-exec-allowlist"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-3x3x-h76w-hp98","url":"https://osv.dev/vulnerability/GHSA-3x3x-h76w-hp98"}],"summary":"OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write"}