{"action":"Upgrade openclaw to 2026.2.21 or later.","affected":[{"fixed":"2026.2.21","introduced":"0"}],"component":"openclaw","cve_ids":["CVE-2026-32063"],"ecosystem":"npm","epss":0.01223,"exploited":false,"fixed_versions":["2026.2.21"],"ghsa_id":"GHSA-vffc-f7r7-rx2w","id":"tcs_01M5KGBNM8HEZKNJV5AAHYSFJF","modified_at":"2026-07-08T08:14:43.689247312Z","published_at":"2026-03-03T21:52:54Z","references":["https://osv.dev/vulnerability/GHSA-vffc-f7r7-rx2w","https://github.com/openclaw/openclaw/security/advisories/GHSA-vffc-f7r7-rx2w","https://nvd.nist.gov/vuln/detail/CVE-2026-32063","https://github.com/openclaw/openclaw/commit/61f646c41fb43cd87ed48f9125b4718a30d38e84","https://github.com/openclaw/openclaw","https://www.vulncheck.com/advisories/openclaw-command-injection-via-newline-in-systemd-unit-generation"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-vffc-f7r7-rx2w","url":"https://osv.dev/vulnerability/GHSA-vffc-f7r7-rx2w"},{"source":"nvd","source_id":"CVE-2026-32063","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32063"}],"summary":"OpenClaw Improperly Neutralizes Line Breaks in systemd Unit Generation Enables Local Command Execution (Linux)"}