Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended authorization. Attackers can exploit misconfigured input paths to execute or persist unauthorized actions when the affected feature is enabled and reachable.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-62223 Authorization Bypass in OpenClaw Before 2026.5.18 Device-Pair Approval Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-62223
Post summary
The note announces the discovery of an authorization bypass vulnerability (CVE-2026-62223) affecting OpenClaw prior to 2026.5.18, linking to a vulnerability database entry but providing no additional exploit or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |