GHSA-w5c7-9qqw-6645: OpenClaw inter-session prompts could be treated as direct user instructions

February 18, 2026

Inter-session messages sent via sessions_send could be interpreted as direct end-user instructions because they were persisted as role: "user" without provenance metadata.

References

github.com/advisories/GHSA-w5c7-9qqw-6645
github.com/openclaw/openclaw
github.com/openclaw/openclaw/commit/85409e401b6586f83954cb53552395d7aab04797
github.com/openclaw/openclaw/releases/tag/v2026.2.12
github.com/openclaw/openclaw/security/advisories/GHSA-w5c7-9qqw-6645

Code Behaviors & Features

Detect and mitigate GHSA-w5c7-9qqw-6645 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →