Which versions of OpenClaw are affected by CVE-2026-62190?

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability (CVSS 8.7) that allows authenticated low-privilege users to execute and persist privileged actions they were not…

How to fix or mitigate CVE-2026-62190?

Within 24 hours, inventory all OpenClaw deployments and confirm which systems run versions before 2026.6.9. Within 7 days, implement interim controls by disabling the exec-approval feature if operationally feasible, restricting network and shell access for low-privilege accounts, and enabling enhanced audit logging of execution paths. Within 30 days, establish a vendor monitoring plan for OpenClaw security advisories and prepare an upgrade strategy to deploy version 2026.6.9 or later as soon as released; review weekly for patch availability.

OpenClaw CVE-2026-62190

Q: What is the CVSS score of CVE-2026-62190?

CVE-2026-62190 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

HIGH

Use of Incorrectly-Resolved Name or Reference (CWE-706)

2026-07-13 VulnCheck

Authentication Bypass Openclaw

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Authenticated low-trust caller (PR:L) exploits the flock wrapper with low complexity and no user interaction, gaining full C/I/A impact within the same authorization scope (S:U).

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 22:04 vuln.today

CVE Published

Jul 13, 2026 - 21:30 cve.org

HIGH 8.7

DescriptionCVE.org

OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can leverage configured input paths to bypass durable exec approval binding and perform unauthorized operations when the affected feature is enabled.

AnalysisAI

Authorization bypass in OpenClaw before 2026.6.9 lets a lower-trust caller escape the exec-approval trust boundary through the flock wrapper, executing or persisting privileged actions the caller was never authorized to perform. The CVSS 4.0 vector (PR:L) indicates an authenticated but low-privilege actor can achieve high confidentiality, integrity, and availability impact when the affected feature is enabled. Reported by VulnCheck with a vendor GitHub Security Advisory (GHSA-3fp5-v549-9v66); no public exploit identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

The defect lives in OpenClaw's flock wrapper - a component that uses file-locking (flock) semantics to gate and durably bind execution-approval decisions to a caller's trust level. The CWE-706 (Use of an Incorrectly-Resolved Name or Reference) root cause means the wrapper resolves a configured input path or reference in a way that does not correspond to the entity actually being authorized, so the durable exec approval becomes bound to the wrong subject. Because approvals are meant to persist ('durable exec approval binding'), an incorrectly-resolved reference does not merely leak a single action but re-binds authority so that subsequent operations from a lower-trust caller are treated as approved. The only affected product per CPE is cpe:2.3:a:openclaw:openclaw (all versions prior to the fix).

RemediationAI

Vendor-released patch: upgrade OpenClaw to version 2026.6.9 or later, which is the primary and recommended fix per GHSA-3fp5-v549-9v66 (https://github.com/openclaw/openclaw/security/advisories/GHSA-3fp5-v549-9v66). If you cannot upgrade immediately, disable the affected flock-wrapper feature so the vulnerable durable exec-approval path is not reachable - the trade-off is loss of whatever exec-approval binding functionality that feature provides. As a further compensating control, restrict which callers can supply the configured input paths and lock down write access to those path/configuration locations so lower-trust actors cannot influence name/reference resolution; the side effect is tighter operational constraints on legitimate low-trust integrations. Cross-check details against the VulnCheck advisory (https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-flock-wrapper).