{"action":"Upgrade openclaw to 2026.2.22 or later.","affected":[{"fixed":"2026.2.22","introduced":"0"}],"component":"openclaw","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2026.2.22"],"ghsa_id":"GHSA-5847-rm3g-23mw","id":"tcs_01M5KF2ZVRN39NXH3JPWKZZKQV","modified_at":"2026-03-04T15:11:10.711333Z","published_at":"2026-03-03T00:38:48Z","references":["https://osv.dev/vulnerability/GHSA-5847-rm3g-23mw","https://github.com/openclaw/openclaw/security/advisories/GHSA-5847-rm3g-23mw","https://github.com/openclaw/openclaw/commit/3284d2eb227e7b6536d543bcf5c3e320bc9d13c5","https://github.com/openclaw/openclaw"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-5847-rm3g-23mw","url":"https://osv.dev/vulnerability/GHSA-5847-rm3g-23mw"}],"summary":"OpenClaw has hook auth rate limiter bypass via IPv4-mapped IPv6 client key variants"}