CVE-2026-62228

creationtimestamp| type| source ---|---|--- 2026-07-17 02:43:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsq4tvjyu2o 2026-07-19 16:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lpx7vu2m...

@0xwork/connect (>=0.1.0, <=0.1.9), @agentholdings/agent-passport (>=0.1.0, <=0.1.5) +28 more potentially affected by CVE-2026-62228 via openclaw (>=2026.3.22, <=2026.6.1)

openclaw NPM version =2026.3.22, =0.1.0, =0.1.0, =0.8.3-beta.1, =0.1.0, =2.2.4, =2026.3.25, =4.0.0, =0.0.0, =27.2.5, =1.1.0, =2.1.3, =2026.3.24-3, =0.14.39, =0.14.42 and more Source cves: CVE-2026-62228 Source advisory: SNYK:JS-OPENCLAW-18017821...

CVE-2026-62228 OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals

OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to...