VYPR
High severity7.1NVD Advisory· Published Jul 17, 2026· Updated Jul 20, 2026

CVE-2026-62206

CVE-2026-62206

Description

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path could perform moderation actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach the affected path.

Affected products

2
  • OpenClaw/Openclawllm-fuzzy2 versions
    <2026.6.9+ 1 more
    • (no CPE)range: <2026.6.9
    • cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*range: <2026.6.9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.