CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.5 are vulnerable to an authentication bypass that enables lower-trust users to access administrative tools, potentially allowing unauthorized actions that require elevated privileges. This vulnerability arises from inadequate policy checks on input paths, posing a significant risk to the integrity of the system. Organizations using affected versions should prioritize remediation to prevent exploitation and safeguard sensitive administrative functions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers can perform actions requiring stronger authorization by exploiting insufficient policy checks on configured input paths.
Related CVEs
Other vulnerabilities affecting the same vendor(s)