Which versions of OpenClaw are affected by CVE-2026-62202?

OpenClaw versions 2026.6.1 through 2026.6.8 contain an access control bypass in cron job execution that allows authenticated users to execute actions prohibited by policy, creating an insider threat…. A patch is available.

How to fix or mitigate CVE-2026-62202?

Within 24 hours, identify all OpenClaw deployments running versions 2026.6.1 through 2026.6.8 and document which users have access to cron job execution features. Within 7 days, restrict cron job configuration and execution permissions to administrative users only, implement enhanced logging and alerting for all cron job modifications and executions, and review all active user access levels to enforce least-privilege policies. Within 30 days, monitor OpenClaw vendor communications for patch availability, evaluate upgrade pathways to unaffected versions, and conduct a comprehensive audit of all cron job definitions to detect unauthorized modifications.

OpenClaw CVE-2026-62202

Q: What is the CVSS score of CVE-2026-62202?

CVE-2026-62202 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-45091 HIGH

Incorrect Authorization (CWE-863)

2026-07-17 VulnCheck

GHSA-qhfj-5gcr-fpxq

Privilege Escalation Authentication Bypass Openclaw

7.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Network-reachable but needs an existing low-trust account (PR:L) and a non-default misconfigured-path condition (AC:H); impact is high but stays within the vulnerable OpenClaw instance (S:U).

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 17, 2026 - 02:32 EUVD

Analysis Generated

Jul 17, 2026 - 01:00 vuln.today

CVE Published

Jul 17, 2026 - 00:06 cve.org

HIGH 7.7

DescriptionCVE.org

OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. Attackers can execute or persist actions beyond their intended authorization by leveraging misconfigured input paths in the affected cron feature.

AnalysisAI

Privilege escalation in OpenClaw's isolated cron job feature (versions 2026.6.1 through 2026.6.8) lets a lower-trust authenticated caller reclaim execution tools that authorization policy had explicitly denied, enabling actions and persistence beyond their intended trust level. The flaw is an incorrect-authorization (CWE-863) issue rooted in misconfigured input path handling within the cron subsystem, and carries a CVSS 4.0 score of 7.7. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

OpenClaw exposes an isolated cron feature intended to run scheduled jobs under a constrained set of permitted execution tools, sandboxing lower-trust callers away from privileged operations. The vulnerability is classed as CWE-863 (Incorrect Authorization): the authorization decision that should keep a caller's denied tools out of reach is not correctly enforced when the cron job resolves its input paths. Because the input paths are misconfigured/mishandled, a caller can influence which tools the cron execution context loads, effectively re-granting denied capabilities. The single affected component is identified by CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, and VulnCheck's tags (Authentication Bypass, Privilege Escalation) reinforce that the defect is an enforcement gap in the trust boundary rather than a memory-safety or injection bug.

RemediationAI

Vendor-released patch: upgrade OpenClaw to version 2026.6.9 or later, which closes the fix range stated in the advisory; this is the primary and recommended remediation. Consult the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-mm9g-83wh-mhwj for exact upgrade guidance and the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-cron for corroborating detail. If immediate upgrade is not possible, reduce exposure by disabling or restricting the isolated cron feature for lower-trust accounts, auditing and locking down the cron input path configuration so callers cannot influence tool resolution, and tightening which principals hold the low-privilege role that can schedule cron jobs - with the trade-off that disabling cron removes scheduled-job functionality and restricting roles may disrupt legitimate automation. Because the fix version is explicitly known, prioritize patching over workarounds.