{"action":"Upgrade openclaw to 2026.2.26 or later.","affected":[{"fixed":"2026.2.26","introduced":"0"}],"component":"openclaw","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2026.2.26"],"ghsa_id":"GHSA-gp3q-wpq4-5c5h","id":"tcs_01M5KFS56KVM7EZTPHRTKNJ4C9","modified_at":"2026-03-14T02:38:55.408130Z","published_at":"2026-03-12T14:21:45Z","references":["https://osv.dev/vulnerability/GHSA-gp3q-wpq4-5c5h","https://github.com/openclaw/openclaw/security/advisories/GHSA-gp3q-wpq4-5c5h","https://github.com/openclaw/openclaw/commit/892a9c24b0f6118729ab5b5f5499b1a7e792dd15","https://github.com/openclaw/openclaw/commit/8bdda7a651c21e98faccdbbd73081e79cffe8be0","https://github.com/openclaw/openclaw"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-gp3q-wpq4-5c5h","url":"https://osv.dev/vulnerability/GHSA-gp3q-wpq4-5c5h"}],"summary":"OpenClaw: LINE group allowlist scope mismatch with DM pairing-store entries"}