Vulnerabilities CVE-2026-62229

CVE-2026-62229

High

Open

TLP:CLEAR

OpenClaw < 2026.5.18 Authorization Bypass via Glob Matching

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended authorization. Attackers can craft input paths that traverse the allowlist glob patterns to execute or persist unauthorized actions when the affected feature is enabled.

Details

CVSS Score: 7.7
EPSS Score ⓘ: 0.45%

36.8th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 17, 2026
Last Modified: Jul 18, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.