Authorization Bypass Vulnerability in OpenClaw Versions by OpenClaw

CVE-2026-62190

What is CVE-2026-62190?

OpenClaw versions prior to 2026.6.9 are susceptible to an authorization bypass vulnerability within the flock wrapper. This issue allows less-trustworthy callers to perform actions that exceed their permitted authorizations. By exploiting configured input paths, attackers can circumvent durable execution approval binding, leading to unauthorized operations when the affected feature is enabled. It's crucial for users to update to the latest version to mitigate this risk.

References