{"data":{"id":"a5ed223b-c5b5-4837-bf2d-59100c27237f","title":"GHSA-cxpw-2g23-2vgw: OpenClaw: ACP prompt-size checks missing in local stdio bridge could reduce responsiveness with very large inputs","summary":"GHSA-cxpw-2g23-2vgw affects the npm package `openclaw` at versions `<= 2026.2.17`. The ACP bridge accepted very large prompt text blocks and could assemble oversized payloads before forwarding them to `chat.send`, mainly affecting local ACP clients such as IDE integrations over stdio. The source states the impact is reduced responsiveness and higher model usage cost, with no privilege escalation or direct remote attack path in the default ACP model.","solution":"Patched in `2026.2.18` (planned next release). The remediation enforces a 2 MiB prompt-text limit before concatenation, counts inter-block newline separator bytes during pre-concatenation size checks, keeps final outbound message-size validation before `chat.send`, avoids stale active-run session state when oversized prompts are rejected, and adds regression tests for oversize rejection and active-run cleanup.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-cxpw-2g23-2vgw","publishedAt":"2026-02-20T21:52:44.000Z","cveId":"CVE-2026-27576","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["openclaw@<= 2026.2.17 (fixed: 2026.2.19)"],"affectedPackageNames":["openclaw"],"affectedPackageRefs":["npm:openclaw"],"affectedVendors":[],"affectedVendorsRaw":["OpenClaw","ACP (Agent Client Protocol) bridge"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00185,"epssCheckedAt":"2026-11-04T12:08:35.001Z","kevDateAdded":null,"advisoryAliases":["GHSA-cxpw-2g23-2vgw"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-19T16:05:33.610Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:40:43.169Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"openclaw","fixedVersion":"2026.2.19","matchedVersion":"2026.2.19","fixReleasedAt":"2026-02-19T16:05:33.610Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:43.022Z"}]}}