{"action":"Upgrade openclaw to 2026.2.22 or later.","affected":[{"fixed":"2026.2.22","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-32019"],"ecosystem":"npm","epss":0.00214,"exploited":false,"fixed_versions":["2026.2.22"],"ghsa_id":"GHSA-4rqq-w8v4-7p47","id":"tcs_01M5KF1DDJ5DR9TZKEDBHVR52E","modified_at":"2026-05-05T15:56:08.344024Z","published_at":"2026-03-04T19:03:45Z","references":["https://osv.dev/vulnerability/GHSA-4rqq-w8v4-7p47","https://github.com/openclaw/openclaw/security/advisories/GHSA-4rqq-w8v4-7p47","https://nvd.nist.gov/vuln/detail/CVE-2026-32019","https://github.com/openclaw/openclaw/commit/333fbb86347998526dd514290adfd5f727caa6d9","https://github.com/openclaw/openclaw/commit/44dfbd23df453e51b71ef79a148c28c53e89168c","https://github.com/openclaw/openclaw/commit/71bd15bb4294d3d1b54386064d69cd0f5f731bd8","https://github.com/openclaw/openclaw/commit/f14ebd743cfc73f667fae80af70043d0ab1f88bd","https://github.com/openclaw/openclaw","https://www.vulncheck.com/advisories/openclaw-incomplete-ipv4-special-use-range-blocking-in-ssrf-guard"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-4rqq-w8v4-7p47","url":"https://osv.dev/vulnerability/GHSA-4rqq-w8v4-7p47"}],"summary":"OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard"}