Which versions of OpenClaw are affected by CVE-2026-62229?

OpenClaw versions prior to 2026.5.18 contain a path-traversal authorization bypass in the exec feature that allows certain users to exceed their assigned access restrictions and execute unauthorized…. A patch is available.

How to fix or mitigate CVE-2026-62229?

Within 24 hours, inventory all OpenClaw deployments running versions before 2026.5.18 and identify which have the exec feature enabled; if operationally dispensable, disable exec immediately to eliminate the attack surface. Within 7 days, for systems where exec functionality is essential, restrict exec access to high-privilege users only, review and audit all exec-related activity logs for unauthorized access patterns, and document current user access assignments. Within 30 days, monitor vendor release channels for availability of OpenClaw 2026.5.18 and establish an expedited patch deployment process; concurrently, conduct a formal access control audit to ensure all exec users operate under least-privilege principles.

OpenClaw CVE-2026-62229

Q: What is the CVSS score of CVE-2026-62229?

CVE-2026-62229 has a CVSS 4.0 base score of 7.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.5%.

EUVD-2026-45117 HIGH

Path Traversal (CWE-22)

2026-07-17 VulnCheck

GHSA-74vp-c44x-892q

Path Traversal Openclaw

7.7

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Network-reachable but requires an authenticated low-trust caller (PR:L) and the exec feature enabled plus crafted paths (AC:H); full impact on the app with no scope change (S:U).

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Jul 17, 2026 - 02:32 EUVD

Analysis Generated

Jul 17, 2026 - 00:56 vuln.today

CVE Published

Jul 17, 2026 - 00:07 cve.org

HIGH 7.7

DescriptionCVE.org

OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute actions beyond intended authorization. Attackers can craft input paths that traverse the allowlist glob patterns to execute or persist unauthorized actions when the affected feature is enabled.

AnalysisAI

Authorization bypass in OpenClaw before 2026.5.18 lets a low-trust, authenticated caller escape the exec allowlist by abusing weak glob matching, executing or persisting actions beyond their intended authorization. Reported by VulnCheck and tracked as a path-traversal-class flaw (CWE-22), it carries a CVSS 4.0 score of 7.7 with high confidentiality, integrity, and availability impact but requires the affected exec feature to be enabled. No public exploit identified at time of analysis; there is a GitHub security advisory and a corresponding VulnCheck advisory.

Technical ContextAI

The vulnerability lives in OpenClaw's exec allowlist enforcement, which uses glob-pattern matching to decide which actions a caller is authorized to execute. Because glob matching is applied to attacker-influenced input paths, a crafted path can traverse or slip past the intended allowlist boundaries - the classic CWE-22 (Improper Limitation of a Pathname to a Restricted Directory / path traversal) root cause, here manifesting as an authorization-control bypass rather than raw file disclosure. The single CPE in scope, cpe:2.3:a:openclaw:openclaw:*, indicates the flaw is in the OpenClaw application/engine itself and not a downstream integration; the allowlist is meant to be a trust boundary between lower-trust callers and privileged actions, and the glob logic fails to canonicalize or constrain input before matching.

RemediationAI

Vendor-released patch: 2026.5.18 - upgrade OpenClaw to 2026.5.18 or later, which corrects the exec allowlist glob-matching logic; this is the primary and recommended fix per the GitHub advisory (https://github.com/openclaw/openclaw/security/advisories/GHSA-34mr-7r3m-gfg7) and VulnCheck advisory (https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-glob-matching). If immediate upgrade is not possible, disable the exec allowlist feature (or the exec/action-execution capability that relies on it) to remove the vulnerable code path entirely, accepting that any legitimate automation depending on that feature will stop working. As additional compensating controls, tighten who can act as a caller by restricting or revoking lower-trust accounts' access to the exec interface and constraining allowlist patterns to exact, canonical paths rather than broad globs, understanding that overly strict patterns may break intended workflows and should be validated in a staging environment first.