6 matches found
CVE-2026-62205
OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger...
@0xwork/connect (>=0.1.0, <=0.1.9), @chrysb/alphaclaw (>=0.9.10, <=0.9.18) +10 more potentially affected by CVE-2026-62205 via openclaw (>=2026.4.12, <=2026.6.5)
openclaw NPM version =2026.4.12, =0.1.0, =0.9.10, =2.2.4, =4.0.0, =0.0.0, =1.1.50, =2.1.8, =0.1.38, =0.0.1, =1.0.0, =1.3.1 Source cves: CVE-2026-62205 Source advisory: SNYK:JS-OPENCLAW-18021342...
CVE-2026-62205
OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger...
CVE-2026-62205
OpenClaw 2026.4.12-beta.1 before 2026.6.6 contains a missing-authorization vulnerability in the MS Teams message actions feature. When the feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have been subject to stronger authorization ...
CVE-2026-62205 OpenClaw 2026.4.12-beta.1 < 2026.6.6 Authorization Bypass via message actions
OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger...
CVE-2026-62205 OpenClaw 2026.4.12-beta.1 < 2026.6.6 Authorization Bypass via message actions
OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger...