Vulnerabilities CVE-2026-62198

CVE-2026-62198

Medium

Open

TLP:CLEAR

OpenClaw 2026.5.28 < 2026.6.6 Authorization Bypass via Web Search

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute restricted operations.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.16%

5.7th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 13, 2026
Last Modified: Jul 13, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.