Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller or configured input path can supply crafted environment variables to execute or persist actions beyond the caller's intended authorization.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🔴 OpenClaw, Authentication Bypass via Environment Filtering, #CVE-2026-62199 (High) -DC-Jul2026-993 https://dailycve.com/openclaw-authentication-bypass-via-environment-filtering-cve-2026-62199-high-dc-jul2026-993/
Post summary
The post announces a high‑severity authentication bypass vulnerability in OpenClaw (CVE-2026-62199) with basic technical details, but provides no PoC, exploit, or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |