PT-2026-60621 · Openclaw · Openclaw

CVE-2026-62211 · Publicado 2026-07-17 · Atualizado 2026-07-17

NVD

CVSS v3.1

5.0

Média

Vetor base

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose sensitive credentials and data through the export mechanism.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2026-62211

Produtos afetados

Openclaw

Referências · 3

• https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vm · Aviso do Fabricante
• https://vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trajectory-export · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-62211 · Nota de Segurança