PT-2026-60629 · Openclaw · Openclaw

Ylwango613 · CVE-2026-62219 · Publicado 2026-07-17 · Atualizado 2026-07-17

Mitre

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or policy checks.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-62219

Produtos afetados

Openclaw

Referências · 3

• https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-62219 · Nota de Segurança
• https://vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids · Nota