Medium severity6.5NVD Advisory· Published Jul 17, 2026· Updated Jul 20, 2026
CVE-2026-62208
CVE-2026-62208
Description
OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization. Impact depends on the operator's configuration and whether lower-trust input can reach the affected path.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/openclaw/openclaw/security/advisories/GHSA-9c3v-684m-579cnvdMitigationVendor Advisory
- www.vulncheck.com/advisories/openclaw-authorization-header-forwarding-via-ssenvdThird Party Advisory
News mentions
0No linked articles in our index yet.