Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to persist or execute actions that exceed the caller's approved permissions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-62228 Authorization Bypass in OpenClaw Before 2026.6.5 Node Exec Approvals https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-62228
Post summary
The entry announces an authorization bypass vulnerability (CVE‑2026‑62228) in OpenClaw versions prior to 2026.6.5, allowing unauthorized node execution.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |