CVE-2026-62207: Openclaw

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers can perform actions requiring stronger authorization by exploiting insufficient policy checks on configured input paths.

Affected products

• Openclaw Openclaw: before 2026.6.5 (fixed in 2026.6.5)

Published 2026-07-17. Last modified 2026-07-29.