{"action":"Upgrade openclaw to 2026.2.13 or later.","affected":[{"fixed":"2026.2.13","introduced":"0"}],"component":"openclaw","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":["2026.2.13"],"ghsa_id":"GHSA-w5c7-9qqw-6645","id":"tcs_01M5KGE02H9NC5R55V90V5DRQ4","modified_at":"2026-02-18T01:44:52.415375Z","published_at":"2026-02-18T00:56:51Z","references":["https://osv.dev/vulnerability/GHSA-w5c7-9qqw-6645","https://github.com/openclaw/openclaw/security/advisories/GHSA-w5c7-9qqw-6645","https://github.com/openclaw/openclaw/commit/85409e401b6586f83954cb53552395d7aab04797","https://github.com/openclaw/openclaw","https://github.com/openclaw/openclaw/releases/tag/v2026.2.12"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-w5c7-9qqw-6645","url":"https://osv.dev/vulnerability/GHSA-w5c7-9qqw-6645"}],"summary":"OpenClaw inter-session prompts could be treated as direct user instructions"}