CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.8 are vulnerable to an authorization bypass, enabling lower-trust users to circumvent admin authorization checks through misconfigured input paths. This flaw allows attackers to execute restricted operations, posing a significant risk to system integrity and security. Organizations using affected versions should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to bypass admin authorization policies and execute restricted operations.
Related CVEs
Other vulnerabilities affecting the same vendor(s)