High severity8.1NVD Advisory· Published Jul 13, 2026· Updated Jul 15, 2026
CVE-2026-62187
CVE-2026-62187
Description
OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configured input path could perform actions that should have required a stronger authorization or policy check, resulting in unauthorized operations. The issue is fixed in version 2026.6.9. Impact depends on the operator's configuration and whether lower-trust input can reach the affected feature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <=2026.6.6
Patches
Vulnerability mechanics
References
2- github.com/openclaw/openclaw/security/advisories/GHSA-2q7j-2vhx-56g8nvdVendor Advisory
- www.vulncheck.com/advisories/openclaw-feishu-tools-authorization-bypassnvdThird Party Advisory
News mentions
0No linked articles in our index yet.