CyberRota Analysis
AI-GeneratedOpenClaw versions prior to 2026.6.5 are vulnerable to an authorization bypass that enables low-trust users to execute unauthorized actions by exploiting discrepancies in gateway and node environments. This flaw could allow attackers to persistently perform operations beyond their granted permissions, posing a significant security risk. Organizations utilizing OpenClaw should prioritize patching to mitigate potential exploitation of this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond their intended authorization by using different gateway and node environments. Attackers can exploit mismatched environment configurations to persist or execute actions that exceed the caller's approved permissions.
Related CVEs
Other vulnerabilities affecting the same vendor(s)