SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-62206

HIGH · CVSS 7.1 EPSS 0.25% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-17 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

OpenClaw versions prior to 2026.6.9 are vulnerable to a missing authorization flaw that allows lower-trust users to execute moderation actions on Discord without proper authorization checks. The severity of the impact varies based on the operator's configuration and the potential for lower-trust input to exploit the vulnerability. Organizations utilizing OpenClaw for Discord moderation should prioritize patching to mitigate unauthorized access risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-62206
Severity
HIGH
CVSS
7.1
EPSS
0.25%

Original NVD Description

OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path could perform moderation actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach the affected path.

Related CVEs

Other vulnerabilities affecting the same vendor(s)