GHSA-8m9v-xpgf-g99m: OpenClaw has an unauthorized sender bypass in its stop triggers and /models command authorization

Unauthorized senders could trigger two command paths without sender authorization checks:

  1. stop-like natural-language abort triggers
  2. /models command output

References

Code Behaviors & Features

Detect and mitigate GHSA-8m9v-xpgf-g99m with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →