Privilege Escalation Vulnerability in OpenClaw Plugin by OpenClaw

CVE-2026-62194

What is CVE-2026-62194?

OpenClaw versions 2026.5.20 and earlier contain a vulnerability that allows attackers to escalate privileges through improper handling of plugin install commands. This weakness enables lower-trust users to execute unauthorized actions or persist changes beyond their assigned permissions. Attackers may leverage misconfigured input paths or improperly secured features to gain elevated privileges when these elements are accessible. It is crucial for users to update to version 2026.6.9 or later to mitigate this risk.

References