{"action":"Upgrade openclaw to 2026.2.24 or later.","affected":[{"fixed":"2026.2.24","introduced":"2026.2.22"}],"component":"openclaw","cve_ids":["CVE-2026-31998"],"ecosystem":"npm","epss":0.00333,"exploited":false,"fixed_versions":["2026.2.24"],"ghsa_id":"GHSA-gw85-xp4q-5gp9","id":"tcs_01M5KFSMRM9239J8RX01YPHZYX","modified_at":"2026-03-20T21:56:22.212895Z","published_at":"2026-03-03T23:03:49Z","references":["https://osv.dev/vulnerability/GHSA-gw85-xp4q-5gp9","https://github.com/openclaw/openclaw/security/advisories/GHSA-gw85-xp4q-5gp9","https://nvd.nist.gov/vuln/detail/CVE-2026-31998","https://github.com/openclaw/openclaw/commit/0ee30361b8f6ef3f110f3a7b001da6dd3df96bb5","https://github.com/openclaw/openclaw/commit/7655c0cb3a47d0647cbbf5284e177f90b4b82ddb","https://github.com/openclaw/openclaw","https://www.vulncheck.com/advisories/openclaw-authorization-bypass-in-synology-chat-plugin-via-empty-alloweduserids"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-gw85-xp4q-5gp9","url":"https://osv.dev/vulnerability/GHSA-gw85-xp4q-5gp9"},{"source":"nvd","source_id":"CVE-2026-31998","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31998"}],"summary":"OpenClaw's Synology Chat dmPolicy=allowlist failed open on empty allowedUserIds, allowing unauthorized agent dispatch"}