Openclaw Clawdbot vulnerabilities

• openclaw, clawdbot +1 more OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints CVE-2026-26317 Fix available 7.1 HighFebruary 18, 2026
• openclaw, clawdbot +1 more OpenClaw iMessage group allowlist authorization inherited DM pairing-store identities CVE-2026-26328 Fix available 6.5 MediumFebruary 18, 2026