PT-2026-57900 · Openclaw · Openclaw

Publicado 2026-07-13 · Atualizado 2026-07-13 · CVE-2026-62198

NVD

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search that allows lower-trust callers to perform actions requiring stronger policy checks. Attackers can exploit misconfigured input paths to bypass intended authorization controls and execute restricted operations.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-62198

Produtos afetados

Openclaw

Referências · 3

• https://github.com/openclaw/openclaw/security/advisories/GHSA-v4f6-x5g5-2g4g · Aviso do Fabricante
• https://vulncheck.com/advisories/openclaw-authorization-bypass-via-web-search · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-62198 · Nota de Segurança