Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000690

sonatype-2026-000690

OpenClaw - Missing Authentication for Critical Function

Published Mar 3, 2026

https://github.com/advisories/GHSA-vpj2-69hf-rppw

CVSS ScoreMedium

6.9

Ecosystem	Package	Version


npm	openclaw	0.0.1
npm	openclaw	2026.1.29-beta.1
npm	openclaw	2026.1.29-beta.2
npm	openclaw	2026.1.29-beta.3
npm	openclaw	2026.1.29-beta.4
npm	openclaw	2026.1.29-beta.5
npm	openclaw	2026.1.29-beta.7
npm	openclaw	2026.1.29
npm	openclaw	2026.1.30
npm	openclaw	2026.2.12
npm	openclaw	2026.2.13
npm	openclaw	2026.2.14
npm	openclaw	2026.2.15
npm	openclaw	2026.2.17
npm	openclaw	2026.2.19-1
npm	openclaw	2026.2.19-2
npm	openclaw	2026.2.19
npm	openclaw	2026.2.1
npm	openclaw	2026.2.2-1
npm	openclaw	2026.2.2-2
npm	openclaw	2026.2.2-3
npm	openclaw	2026.2.21-1
npm	openclaw	2026.2.21-2
npm	openclaw	2026.2.21
npm	openclaw	2026.2.22-1
npm	openclaw	2026.2.22-2
npm	openclaw	2026.2.22
npm	openclaw	2026.2.23-beta.1
npm	openclaw	2026.2.23
npm	openclaw	2026.2.24
npm	openclaw	2026.2.25-beta.1
npm	openclaw	2026.2.25
npm	openclaw	2026.2.26
npm	openclaw	2026.2.2
npm	openclaw	2026.2.3-1
npm	openclaw	2026.2.3
npm	openclaw	2026.2.6-1
npm	openclaw	2026.2.6-2
npm	openclaw	2026.2.6-3
npm	openclaw	2026.2.6
npm	openclaw	2026.2.9
npm	openclaw	2026.3.1-beta.1

sonatype-2026-000690 | Components Impacted | Sonatype Guide | Sonatype Guide