OpenClaw CVE-2026-62202

Exploitation requires an authenticated lower-trust caller (CVSS PR:L) who can interact with OpenClaw's isolated cron job feature, plus the specific attack requirement (AT:P) that the cron job's input paths are misconfigured/mishandled so that path resolution can be manipulated to reload denied execution tools. The concrete prerequisite named in the description is access to the affected cron feature with controllable input paths on OpenClaw 2026.6.1-2026.6.8. Limiting factors: the attacker must already possess a low-privilege authenticated foothold (not unauthenticated), the target must run a vulnerable version with the cron feature in use, and impact is confined to the vulnerable OpenClaw system (SC/SI/SA:N) rather than pivoting to other systems; no user interaction is required (UI:N).

The vendor CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N, 7.7) describes a network-reachable, low-complexity attack that nonetheless requires an existing low-privilege foothold (PR:L) and the presence of a specific attack requirement (AT:P) - the misconfigured input-path condition in the cron feature. High confidentiality, integrity, and availability impact on the vulnerable system are offset by unchanged subsequent-system metrics (SC/SI/SA:N), meaning damage is contained to the OpenClaw instance rather than cascading. No EPSS score was supplied, the CVE is not in CISA KEV, and no POC was referenced, so all real-world exploitation signals are currently absent or unknown - this reads as a genuine authorization weakness but not an urgent mass-exploitation event. The AT:P requirement and PR:L precondition are the key limiters: an attacker must already be an authenticated lower-trust caller and the target must expose the affected cron configuration, suggesting targeted rather than opportunistic risk. Note the assessment relies solely on the vendor vector and a two-sentence description; the exact nature of the 'misconfigured input paths' is not detailed in the input.

An attacker who already holds a low-trust authenticated account on an OpenClaw instance schedules or edits an isolated cron job, supplying crafted input paths that cause the cron execution context to load execution tools their role was denied. Once those tools are restored, they run privileged actions or plant a persistent scheduled job that continues executing beyond their authorization. No public exploit code has been identified, and success depends on the specific misconfigured-input-path condition (AT:P) being present.