Authorization Bypass in OpenClaw by OpenClaw

CVE-2026-62228

What is CVE-2026-62228?

OpenClaw versions before 2026.6.5 are susceptible to an authorization bypass vulnerability found in node exec approvals. This flaw enables users with lower trust levels to execute actions that exceed their original permissions by manipulating the environment configurations. Attackers can exploit this vulnerability by altering the gateway and node environments, leading to unauthorized actions that could compromise application security. Timely updates and patches are essential to mitigate this risk and protect sensitive operations.

References