Authorization Bypass Vulnerability in OpenClaw by OpenClaw

CVE-2026-62198

What is CVE-2026-62198?

OpenClaw versions prior to 2026.6.6 contain a vulnerability that allows attackers to bypass authorization controls through native web search functionalities. By exploiting misconfigured input paths, unauthorized users can perform restricted actions that require more stringent policy checks. This poses a significant risk as it enables lower-trust callers to execute operations that should be securely restricted, making it essential for users to update their software to mitigate potential threats.

References