CVE-2026-62187

creationtimestamp| type| source ---|---|--- 2026-07-13 22:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrm5eao22k 2026-07-14 12:03:09+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqm5ydioea2n 2026-07-14 12:03:09+00:00| seen|...

CVE-2026-62187

OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...

CVE-2026-62187 OpenClaw < 2026.6.9 Feishu tools Authorization Bypass

OpenClaw Feishu tools npm package @openclaw/feishu in versions = 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue...