Which versions of OpenClaw are affected by CVE-2026-62207?

OpenClaw versions prior to 2026.6.5 contain an authorization bypass flaw that allows authenticated low-privilege users to escalate access and perform unauthorized administrative actions.. A patch is available.

How to fix or mitigate CVE-2026-62207?

Within 24 hours, enumerate all systems running OpenClaw and determine if any are pre-2026.6.5. Within 7 days, since no vendor-released patch is identified at time of analysis, implement interim controls: restrict OpenClaw user access to high-privilege accounts only, enable audit logging for all admin-scoped tool invocations, and monitor for anomalous administrative activity. Within 30 days, contact your OpenClaw vendor regarding availability of version 2026.6.5 or later, conduct testing in a staging environment, and schedule deployment to production systems.

OpenClaw CVE-2026-62207

Q: What is the CVSS score of CVE-2026-62207?

CVE-2026-62207 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-45095 HIGH

Missing Authorization (CWE-862)

2026-07-17 VulnCheck

GHSA-86p5-rr4v-4pj8

Authentication Bypass Openclaw

7.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Network-reachable and needs low-trust credentials (PR:L), but the required configured input paths are a precondition beyond attacker control, mapping to AC:H; full High CIA on the same system, no scope change.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 17, 2026 - 02:32 EUVD

Analysis Generated

Jul 17, 2026 - 00:59 vuln.today

CVE Published

Jul 17, 2026 - 00:06 cve.org

HIGH 7.7

DescriptionCVE.org

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers can perform actions requiring stronger authorization by exploiting insufficient policy checks on configured input paths.

AnalysisAI

Authorization bypass in OpenClaw before 2026.6.5 lets a low-privileged, authenticated caller reach admin-scoped tools and perform privileged actions they should not be authorized for. The flaw stems from insufficient policy checks on configured input paths (CWE-862, Missing Authorization), so a lower-trust principal can escalate the scope of operations available to it. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the issue was reported by VulnCheck with a CVSS 4.0 base score of 7.7.

Technical ContextAI

OpenClaw exposes a set of callable tools that are gated by trust/authorization scopes, with certain tools reserved for admin-level callers. The root cause is CWE-862 (Missing Authorization): the policy layer that is supposed to decide whether a given caller may invoke an admin-scoped tool does not fully enforce that decision for particular configured input paths, allowing a lower-trust caller's request to be routed to a higher-privileged capability. The single affected CPE (cpe:2.3:a:openclaw:openclaw:*) indicates one application product line rather than a suite. Because the weakness is a broken authorization check rather than a memory-safety or injection bug, the exploit does not require crafted payloads to corrupt the process - it requires exercising a request path where the missing check exposes an admin function to an under-privileged identity.

RemediationAI

Vendor-released patch: 2026.6.5 - upgrade OpenClaw to 2026.6.5 or later, which corrects the insufficient policy checks; this is the primary and recommended fix. Review the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-cf2p-f286-mphf and https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-admin-tools for exact remediation notes. If you cannot upgrade immediately, the AT:P condition points to compensating controls: audit and tighten the policy configuration on the specific input paths that expose admin-scoped tools, remove or restrict admin-scoped tools from being reachable by low-trust roles, and place the admin surface behind network segmentation or an authenticating reverse proxy that enforces role separation independently of OpenClaw. Trade-offs: restricting admin tool exposure or fronting it with a proxy may break legitimate low-trust automation that currently relies on those paths, so validate authorized workflows before locking them down. Also rotate or re-scope any low-trust credentials that could be abused until the patch is applied.