GHSA-V6X2-2QVM-6GV8 OpenClaw reuses the gateway auth token in the owner ID prompt hashing fallback

Vulnerability OpenClaw reused gateway.auth.token and gateway.remote.token as a fallback hash secret for owner-ID prompt obfuscation when commands.ownerDisplay=hash and commands.ownerDisplaySecret was unset. This created secret dual-use between gateway authentication and prompt metadata hashing...