Which versions of OpenClaw are affected by CVE-2026-62194?

OpenClaw versions 2026.5.20 through 2026.6.8 contain a privilege escalation vulnerability allowing authenticated, low-privileged users to bypass permission controls and execute arbitrary actions with…

How to fix or mitigate CVE-2026-62194?

Within 24 hours: inventory all deployed OpenClaw instances running versions 2026.5.20 through 2026.6.8 and audit current plugin installation permissions by user role. Within 7 days: restrict plugin installation privileges to system administrators only, remove plugin installation permissions from all lower-privileged roles, and enable detailed audit logging for all plugin-related commands; consider isolating affected instances from sensitive network segments if operationally feasible. Within 30 days: establish contact with OpenClaw vendor support to confirm patch timeline and interim recommendations; evaluate architectural options to eliminate or minimize plugin functionality in affected deployments; conduct comprehensive access review of all historical low-privileged account activities and revoke unnecessary permissions.

OpenClaw CVE-2026-62194

Q: What is the CVSS score of CVE-2026-62194?

CVE-2026-62194 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

HIGH

Incorrect Permission Assignment for Critical Resource (CWE-732)

2026-07-13 VulnCheck

Privilege Escalation Openclaw

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable plugin command usable by an authenticated low-privilege caller (PR:L) at low complexity with no UI; full impact on the instance with no scope change (S:U).

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 22:06 vuln.today

CVE Published

Jul 13, 2026 - 21:30 cve.org

HIGH 8.7

DescriptionCVE.org

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can exploit misconfigured input paths or enabled features to escalate privileges and perform unauthorized actions when the feature is reachable.

AnalysisAI

Privilege escalation in OpenClaw 2026.5.20 through 2026.6.8 lets an already-authenticated, lower-trust caller abuse the plugin install command path to execute or persist actions beyond their intended authorization. The root cause is an incorrect permission assignment (CWE-732) on plugin installation, and the CVSS 4.0 vector (PR:L, UI:N, AV:N) shows a low-privileged remote actor can achieve high confidentiality, integrity, and availability impact. No public exploit identified at time of analysis and the CVE is not in CISA KEV, but a GitHub Security Advisory (GHSA-7vrr-rp4x-4g76) and a VulnCheck advisory document it.

Technical ContextAI

OpenClaw exposes plugin install commands as part of its extensibility model. The vulnerability class is CWE-732 (Incorrect Permission Assignment for a Critical Resource): the plugin-install feature fails to enforce the trust boundary between higher- and lower-privileged callers, so operations that should require elevated authorization become reachable by lower-trust callers. The description points to 'misconfigured input paths or enabled features' as the trigger, implying the permission check on the install code path (or the paths/features it consumes) is missing or based on attacker-influenceable input. The single affected CPE, cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, is an application component with no OS or hardware element, confirming this is a software-level authorization defect rather than an environmental one.

RemediationAI

Upgrade OpenClaw to version 2026.6.9 or later, the first release outside the vulnerable range per the advisory (Vendor-released patch: 2026.6.9). Consult the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76 for exact fixed-build details. If immediate patching is not possible, reduce exposure by restricting who can reach the plugin install command path - limit plugin-install and plugin-management privileges to trusted administrators only, and review any 'enabled features' or configurable input paths named in the advisory to ensure they are not exposed to lower-trust accounts; disabling optional plugin-install capabilities where they are not required removes the reachable surface entirely (trade-off: users lose self-service plugin installation). Also audit installed plugins and persisted actions for unauthorized changes, since the flaw allows persistence beyond intended authorization.