Lucene search
+L

5 matches found

CVE
CVE
•added 2026/07/17 12:07 a.m.•84 views

CVE-2026-62228

CVE-2026-62228 affects OpenClaw prior to 2026.6.5, describing an authorization bypass in node exec approvals. The vulnerability arises from mismatched gateway and node environments, enabling lower-trust callers to persist or execute actions beyond their approved permissions due to environment con...

8.8CVSS6.2AI score0.00451EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2026/07/17 12:07 a.m.•18 views

CVE-2026-62228

OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to...

8.8CVSS6.2AI score0.00451EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/07/17 12:07 a.m.•76 views

CVE-2026-62228 OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals

OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to...

8.8CVSS0.00451EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2026/07/17 12:07 a.m.•23 views

CVE-2026-62228 OpenClaw < 2026.6.5 Authorization Bypass via Node Exec Approvals

OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to...

7.7CVSS5.6AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/17 12:00 a.m.•11 views

CVE-2026-62228: Incorrect Authorization

OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to...

8.8CVSS6.3AI score0.00451EPSS
SaveExploits0References4
Rows per page
Query Builder