{"action":"Upgrade @enderfga/claw-orchestrator to 3.5.6 or later.","affected":[{"fixed":"3.5.6","introduced":"0"}],"component":"@enderfga/claw-orchestrator","cve_ids":["CVE-2026-10281"],"ecosystem":"npm","epss":0.00411,"exploited":false,"fixed_versions":["3.5.6"],"ghsa_id":"GHSA-q6qc-xp4q-rjq5","id":"tcs_01M5KG5F6G9HVXDVFMJQ3RA5XK","modified_at":"2026-07-09T13:56:44.615882Z","published_at":"2026-06-01T21:30:42Z","references":["https://osv.dev/vulnerability/GHSA-q6qc-xp4q-rjq5","https://nvd.nist.gov/vuln/detail/CVE-2026-10281","https://github.com/Enderfga/claw-orchestrator/issues/61","https://github.com/Enderfga/claw-orchestrator/commit/d0b02a800aa0689d9428cc4cc170e0b6589fb2c3","https://github.com/Enderfga/claw-orchestrator","https://github.com/Enderfga/claw-orchestrator/releases/tag/v3.5.6","https://vuldb.com/cve/CVE-2026-10281","https://vuldb.com/submit/825429","https://vuldb.com/vuln/367574","https://vuldb.com/vuln/367574/cti"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-q6qc-xp4q-rjq5","url":"https://osv.dev/vulnerability/GHSA-q6qc-xp4q-rjq5"}],"summary":"Claw Orchestrator is missing authentication for the component API Endpoint"}