CVE-2026-19007

Name of the Vulnerable Software and Affected Versions mf-yang openclaw-cn versions prior to 0.2.2

Description Improper privilege management exists in the isApprovedElevatedSender() function within the src/auto-reply/reply/reply-elevated.ts file. This flaw allows a remote attacker to manipulate privilege levels.

Recommendations As a temporary workaround, consider restricting the use of the isApprovedElevatedSender() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.