Vulnerabilities CVE-2026-62221

CVE-2026-62221

Low

Open

TLP:CLEAR

OpenClaw 2026.5.12 < 2026.5.26 Authorization Bypass via allowFrom

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFrom feature. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization, including running non-allowlisted commands.

Details

CVSS Score: 2.3
EPSS Score ⓘ: 0.14%

4.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 17, 2026
Last Modified: Jul 17, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.