Vulnerability Database - OSV

GHSA-xr4f-mjxj-w6w5

npm/openclaw

OpenClaw: Non-owner chat senders could issue device-pairing bootstrap codes 02 Jul

Fix available
Severity - 8.3 (High)

MINI-q2gj-pr2q-mjxv

MinimOS/openclaw

See record for full details 03 Jul

Fix available

CVE-2026-32905

github.com/openclaw/openclaw

OpenClaw < 2026.5.4 - Unauthorized Device-Pairing Bootstrap Code Issuance via Chat Command 29 May

Fix available
Severity - 8.7 (High)