Vulnerabilities CVE-2026-62224

CVE-2026-62224

Low

Open

TLP:CLEAR

OpenClaw MS Teams < 2026.5.12 Authorization Bypass

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.

Details

CVSS Score: 2.3
EPSS Score ⓘ: 0.16%

5.2th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 17, 2026
Last Modified: Jul 17, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.