Threats tagged 'ghsa-3xv9-89fm-7h4r'

OpenClaw versions up to 2026.3.28 contain a low-severity access control vulnerability where the diffs viewer misclassifies proxied remote requests as local loopback requests when the 'allowRemoteViewer' setting is disabled. This flaw was fixed in version 2026.3.31.