CVE-2026-62200 — OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and rea…
Published: 2026-07-13 · CVSS: 8.7 · CVSS 4.0
OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7