CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.5 are vulnerable to an authentication bypass that enables lower-trust users to execute actions requiring higher authorization by manipulating HTTP Canvas responses. This flaw allows attackers to forge trusted A2UI actions, effectively circumventing security policies. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers can perform actions requiring stronger authorization by submitting crafted requests through configured input paths, bypassing intended policy checks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)