{"action":"Upgrade openclaw to 2026.2.21 or later.","affected":[{"fixed":"2026.2.21","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-32008"],"ecosystem":"npm","epss":0.00419,"exploited":false,"fixed_versions":["2026.2.21"],"ghsa_id":"GHSA-45cg-2683-gfmq","id":"tcs_01M5KEZB0YV8P4MSA8F7J9E04V","modified_at":"2026-07-08T07:38:27.658787136Z","published_at":"2026-03-03T21:37:59Z","references":["https://osv.dev/vulnerability/GHSA-45cg-2683-gfmq","https://github.com/openclaw/openclaw/security/advisories/GHSA-45cg-2683-gfmq","https://github.com/openclaw/openclaw/commit/220bd95eff6838234e8b4b711f86d4565e16e401","https://github.com/openclaw/openclaw"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-45cg-2683-gfmq","url":"https://osv.dev/vulnerability/GHSA-45cg-2683-gfmq"}],"summary":"OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files"}