CVE-2026-19007

CVE-2026-19007 affects mf-yang openclaw-cn up to version 0.2.1, stemming from the isApprovedElevatedSender function in src/auto-reply/reply/reply-elevated.ts, causing improper privilege management. The vulnerability can be triggered remotely and has publicly disclosed exploit information. The pro...