{"action":"Upgrade openclaw to 2026.3.12 or later.","affected":[{"fixed":"2026.3.12","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-32924"],"ecosystem":"npm","epss":0.00315,"exploited":false,"fixed_versions":["2026.3.12"],"ghsa_id":"GHSA-m69h-jm2f-2pv8","id":"tcs_01M5KFZSNY0NVPRMN5E2G5ATK8","modified_at":"2026-07-08T07:35:47.655897599Z","published_at":"2026-03-13T20:54:30Z","references":["https://osv.dev/vulnerability/GHSA-m69h-jm2f-2pv8","https://github.com/openclaw/openclaw/security/advisories/GHSA-m69h-jm2f-2pv8","https://github.com/openclaw/openclaw/pull/44088","https://github.com/openclaw/openclaw/commit/3e730c0332eb0a3dc9e1e8c29a5f95e933317b41","https://github.com/openclaw/openclaw","https://github.com/openclaw/openclaw/releases/tag/v2026.3.12"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-m69h-jm2f-2pv8","url":"https://osv.dev/vulnerability/GHSA-m69h-jm2f-2pv8"},{"source":"nvd","source_id":"CVE-2026-32924","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32924"}],"summary":"OpenClaw: Feishu reaction events could bypass group authorization and mention gating"}