{"action":"Upgrade openclaw to 2026.2.19 or later.","affected":[{"fixed":"2026.2.19","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-27576"],"ecosystem":"npm","epss":0.00185,"exploited":false,"fixed_versions":["2026.2.19"],"ghsa_id":"GHSA-cxpw-2g23-2vgw","id":"tcs_01M5KFKYSTHM0XJ74S5QRT8RZC","modified_at":"2026-02-23T22:55:24.173821Z","published_at":"2026-02-20T21:52:44Z","references":["https://osv.dev/vulnerability/GHSA-cxpw-2g23-2vgw","https://github.com/openclaw/openclaw/security/advisories/GHSA-cxpw-2g23-2vgw","https://nvd.nist.gov/vuln/detail/CVE-2026-27576","https://github.com/openclaw/openclaw/commit/63e39d7f57ac4ad4a5e38d17e7394ae7c4dd0b9c","https://github.com/openclaw/openclaw/commit/8ae2d5110f6ceadef73822aa3db194fb60d2ba68","https://github.com/openclaw/openclaw/commit/ebcf19746f5c500a41817e03abecadea8655654a","https://github.com/openclaw/openclaw","https://github.com/openclaw/openclaw/releases/tag/v2026.2.19"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-cxpw-2g23-2vgw","url":"https://osv.dev/vulnerability/GHSA-cxpw-2g23-2vgw"},{"source":"nvd","source_id":"CVE-2026-27576","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27576"}],"summary":"OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs"}