Which versions of OpenClaw are affected by CVE-2026-62200?

OpenClaw authorization bypass vulnerability (CVE-2026-62200, CVSS 8.7) allows authenticated low-privilege users to escalate permissions and compromise confidentiality, integrity, and availability of…

How to fix or mitigate CVE-2026-62200?

Within 24 hours: Inventory all OpenClaw deployments and their versions; isolate or restrict network access to any running versions before 2026.6.1 as a temporary containment measure. Within 7 days: Implement compensating controls including restricting low-privilege account permissions, disabling Git ext transport if operationally feasible, and enabling comprehensive audit logging for authentication and authorization events. Within 30 days: Monitor OpenClaw vendor advisories for patch release; upon availability, test in staging and deploy to all affected production instances.

OpenClaw CVE-2026-62200

Q: What is the CVSS score of CVE-2026-62200?

CVE-2026-62200 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

HIGH

Incomplete List of Disallowed Inputs (CWE-184)

2026-07-13 VulnCheck

Information Disclosure Openclaw

8.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.8 HIGH

Network-reachable with a low-privileged authenticated caller (PR:L) and no user interaction; incomplete filtering yields host execution with full C/I/A impact, scope unchanged pending confirmation of cross-boundary effect.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 22:08 vuln.today

CVE Published

Jul 13, 2026 - 21:30 cve.org

HIGH 8.7

DescriptionCVE.org

OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.

AnalysisAI

Authorization bypass in OpenClaw before 2026.6.1 lets a lower-trust authenticated caller abuse Git 'ext' transport through incomplete host-exec environment filtering to execute or persist actions beyond their intended privileges. VulnCheck reported and characterizes it as an authentication bypass via Git ext transport, and a GitHub Security Advisory (GHSA-9969-8g9h-rxwm) is published; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. The CVSS 4.0 base score of 8.7 reflects high confidentiality, integrity, and availability impact reachable over the network with only low privileges.

Technical ContextAI

OpenClaw (cpe:2.3:a:openclaw:openclaw) is the affected application. The root cause maps to CWE-184 (Incomplete List of Disallowed Inputs): the code that filters the host execution environment relies on a denylist/allowlist that fails to fully constrain Git's 'ext' transport. Git's ext:: transport is a well-known mechanism that runs an arbitrary external program specified in a remote URL to bridge Git's protocol over a custom command; when a consumer does not strip or reject GIT_* environment variables and ext transport handlers, a caller who controls a repository URL or config input can cause the host to invoke commands. The vulnerability sits at the boundary between OpenClaw's trust filtering and the underlying Git subprocess environment.

RemediationAI

Vendor-released patch: 2026.6.1 - upgrade OpenClaw to 2026.6.1 or later as the primary fix, per the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm. If immediate upgrade is not possible, disable or make unreachable the affected host-exec/Git-integration feature so the ext transport path cannot be triggered (this removes any functionality that depends on external Git transports), and restrict which lower-trust callers or configured input paths can reach that feature by tightening authentication and network exposure. As a Git-level compensating control, unset or sanitize GIT_* environment variables and configure Git to reject the ext transport (for example by constraining allowed protocols) for the account OpenClaw runs as, accepting that this will break any legitimate workflows that rely on ext:: remotes. Corroborate specifics against the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport.