OpenClaw CVE-2026-62193

Q: What is the CVSS score of CVE-2026-62193?

CVE-2026-62193 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

MEDIUM

Incorrect Authorization (CWE-863)

2026-07-13 VulnCheck

Authentication Bypass Openclaw

6.9

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

4.9 MEDIUM

Network-reachable with low complexity but requires high privileges; integrity-only impact with unchanged scope matches the authorization bypass enabling unauthorized plugin installation.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 22:12 vuln.today

DescriptionCVE.org

OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could skip the install policy (authorization) check. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path could execute or persist actions beyond the caller's intended authorization. Impact depends on the operator's configuration and whether lower-trust input can reach the affected path. The issue is fixed in 2026.6.9.

AnalysisAI

Authorization bypass in OpenClaw's plugin install wrappers (versions 2026.6.5 through 2026.6.8) allows a lower-trust authenticated caller to skip the install policy check, executing or persisting plugin actions beyond their intended authorization scope. The impact is bounded by operator configuration - deployments where the plugin install feature is disabled or unreachable are not affected. No public exploit code has been identified and the vulnerability does not appear in CISA KEV; vendor-released fix is available in version 2026.6.9.

Technical ContextAI

OpenClaw (CPE: cpe:2.3:a:openclaw:openclaw) is the affected application across versions 2026.6.5 up to but not including 2026.6.9. The flaw is classified as CWE-863 (Incorrect Authorization), a logic error where the plugin install wrapper path fails to consistently invoke the authorization policy gate, allowing callers with lower trust levels to bypass the check entirely. This is distinct from an authentication failure - the caller is recognized by the system, but the enforcement of what that caller is permitted to do is incorrectly skipped. The vulnerability surface is specifically the plugin install subsystem, meaning other features of OpenClaw are not directly implicated.

RemediationAI

Upgrade to OpenClaw version 2026.6.9, which contains the vendor-released fix for the authorization bypass in the plugin install wrappers, as confirmed by the GitHub security advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-wgq8-x5wm-g4rw. If immediate patching is not feasible, operators should disable the plugin install feature entirely or restrict access to the plugin install endpoint at the network or application layer so that only fully trusted callers can reach it - note that disabling plugin install will prevent dynamic plugin management workflows until the upgrade is applied. Access control lists or firewall rules blocking lower-trust principals from reaching the plugin install path serve as a compensating control but do not eliminate the underlying flaw.