Threats tagged 'ghsa-mw7v-rxqg-f85m'

OpenClaw versions from 2026.3.31 up to but not including 2026.4.10 contain a privilege escalation vulnerability. The flaw involves the heartbeat owner downgrade detection missing local background asynchronous execution completion events, allowing attackers to provide untrusted completion content. This can result in a process running with higher privileges than intended.