Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/17 9:43 p.m.6 views

GHSA-8MH7-PHF8-XGFM OpenClaw skills.status could leak secrets to operator.read clients

Summary skills.status could disclose secrets to operator.read clients by returning raw resolved config values in configChecks for skill requires.config paths. Affected Packages / Versions - Package: openclaw npm - Affected: = 2026.2.14...

5.3CVSS5.6AI score0.00303EPSS
SaveExploits0References6
Rows per page
Query Builder