Medium severity5.4NVD Advisory· Published Jul 17, 2026· Updated Jul 21, 2026
CVE-2026-62225
CVE-2026-62225
Description
OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can bypass tool policy restrictions through configured input paths to perform unauthorized actions when the affected feature is enabled and reachable.
Affected products
2Patches
Vulnerability mechanics
References
2- github.com/openclaw/openclaw/security/advisories/GHSA-mhm4-93fw-4qr2nvdMitigationVendor Advisory
- www.vulncheck.com/advisories/openclaw-authorization-bypass-via-skill-command-dispatchnvdThird Party Advisory
News mentions
0No linked articles in our index yet.