GHSA-3q42-xmxv-9vfr: OpenClaw: Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send

April 7, 2026

Gateway operator.write Can Reach Admin-Class Talk Voice Config Persistence via chat.send

References

github.com/advisories/GHSA-3q42-xmxv-9vfr
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/e34694733fc64931ed4a543c73d84ad3435d5df1
github.com/openclaw/openclaw/security/advisories/GHSA-3q42-xmxv-9vfr

Code Behaviors & Features

Detect and mitigate GHSA-3q42-xmxv-9vfr with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →