{"data":{"id":"659d68d4-f06a-4e74-b068-dd9264eb5f03","title":"GHSA-6hf3-mhgc-cm65: OpenClaw session tool visibility hardening and Telegram webhook secret fallback","summary":"In shared-agent, multi-user deployments, OpenClaw session tools (`sessions_list`, `sessions_history`, `sessions_send`) allowed broader session targeting than some operators intended, which could expose transcript content across peer sessions. Separately, Telegram webhook mode did not fall back to the per-account `webhookSecret` when only the account-level secret was configured. Affected versions of npm `openclaw` are `<= 2026.2.14`.","solution":"Patched in `2026.2.15` (planned next release). Remediation adds and enforces `tools.sessions.visibility` (`self | tree | agent | all`) across session tools, defaulting to `tree`, keeps sandbox clamping so sandboxed runs can be restricted to spawned/session-tree visibility, and resolves the Telegram webhook secret from account config fallback in monitor webhook startup. Fix commit: `c6c53437f7da033b94a01d492e904974e7bda74c`.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-6hf3-mhgc-cm65","publishedAt":"2026-02-18T22:43:53.000Z","cveId":"CVE-2026-27004","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["openclaw@< 2026.2.15 (fixed: 2026.2.15)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00118,"epssCheckedAt":"2026-11-04T06:10:15.563Z","kevDateAdded":null,"advisoryAliases":["GHSA-6hf3-mhgc-cm65"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-16T03:56:42.422Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:40:50.995Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.15","matchedVersion":"2026.2.15","fixReleasedAt":"2026-02-16T03:56:42.422Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:50.845Z"}]}}