Which versions of OpenClaw are affected by CVE-2026-62222?

OpenClaw before version 2026.5.22 contains a local privilege escalation vulnerability (CVE-2026-62222) allowing lower-privileged users to load malicious plugins during setup-mode operations, enabling…. A patch is available.

How to fix or mitigate CVE-2026-62222?

Within 24 hours, catalog all OpenClaw deployments and versions across the organization. Within 7 days, implement compensating controls: restrict plugin search paths to read-only trusted directories, require administrative approval for setup-mode operations, and configure file system ACLs preventing lower-privileged users from modifying plugin sources. Within 30 days, monitor vendor security advisories for patch availability and conduct a security review of plugin governance policies.

OpenClaw CVE-2026-62222

Q: What is the CVSS score of CVE-2026-62222?

CVE-2026-62222 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-45110 HIGH

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-07-17 VulnCheck

GHSA-7m8v-vm4p-2vf4

Information Disclosure Openclaw

7.1

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.1 HIGH

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.7 MEDIUM

Local vector with a required precondition (AC:H) and attacker needing lower-trust caller access or path control (PR:L), victim must trigger setup (UI:R); loaded plugin executes with full C/I/A impact.

3.1 AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

4.0 AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Patch available

Jul 17, 2026 - 02:32 EUVD

Analysis Generated

Jul 17, 2026 - 00:57 vuln.today

CVE Published

Jul 17, 2026 - 00:07 cve.org

HIGH 7.1

DescriptionCVE.org

OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted workspace plugins. Attackers with lower-trust caller access or control over configured input paths can execute or persist actions beyond their intended authorization level.

AnalysisAI

Untrusted plugin loading in OpenClaw before 2026.5.22 lets an attacker with lower-trust caller access, or control over configured input paths, get malicious workspace plugins loaded through the setup-mode discovery process, executing or persisting actions above their intended authorization level. Exploitation is local and requires active user interaction plus a specific attack precondition (CVSS 4.0 base 7.1), and there is no public exploit identified at time of analysis. The root cause is inclusion of functionality from an untrusted control sphere (CWE-829) during setup-mode plugin discovery.

Technical ContextAI

OpenClaw exposes a 'setup-mode discovery' mechanism that enumerates and loads workspace plugins from configured input paths. The flaw maps to CWE-829 (Inclusion of Functionality from an Untrusted Control Sphere): during setup, the discovery routine does not adequately validate the trust boundary of the plugin source, so code supplied by a lower-trust caller - or placed in a location the attacker can influence via configured input paths - is loaded and executed by the higher-trust OpenClaw process. Because plugins run as executable functionality inside the host application, loading an untrusted plugin is effectively arbitrary code/action execution within OpenClaw's authorization context. The single CPE provided, cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*, covers all OpenClaw versions prior to the fix without narrowing to a platform or edition.

RemediationAI

Vendor-released patch: upgrade OpenClaw to 2026.5.22 or later, which is the primary and authoritative fix per GitHub advisory GHSA-rh6r-vvfc-86jq (https://github.com/openclaw/openclaw/security/advisories/GHSA-rh6r-vvfc-86jq). Until the upgrade is applied, reduce exposure by restricting who can influence the configured plugin input paths - store plugin/workspace directories on paths writable only by trusted administrators (removing group/other write permissions), and avoid pointing OpenClaw's configured input paths at shared, world-writable, or user-supplied locations, since this closes the 'control over configured input paths' vector at the cost of tighter path management. Where feasible, avoid running setup-mode discovery in contexts reachable by lower-trust callers, and validate that only vetted plugins are present before initiating setup; the trade-off is added operational friction when legitimately adding new plugins. Corroborating detail is available in the VulnCheck advisory (https://www.vulncheck.com/advisories/openclaw-untrusted-plugin-loading-via-setup-mode).