{"action":"Upgrade openclaw to 2026.5.2 or later.","affected":[{"fixed":"2026.5.2","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-53827"],"ecosystem":"npm","epss":0.00436,"exploited":false,"fixed_versions":["2026.5.2"],"ghsa_id":"GHSA-grc3-2j34-p6gm","id":"tcs_01M5KFSDQWNCH7EXPHD95XGMPB","modified_at":"2026-07-08T08:13:01.605171088Z","published_at":"2026-07-02T16:53:15Z","references":["https://osv.dev/vulnerability/GHSA-grc3-2j34-p6gm","https://github.com/openclaw/openclaw/security/advisories/GHSA-grc3-2j34-p6gm","https://github.com/openclaw/openclaw"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-grc3-2j34-p6gm","url":"https://osv.dev/vulnerability/GHSA-grc3-2j34-p6gm"}],"summary":"OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs"}