CVE-2026-62206 — OpenClaw < 2026.6.9 Authentication Bypass via Moderation Actions
OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input pat…
Published: 2026-07-17 · CVSS: 6.0 · CVSS 4.0
OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions. In affected versions, a lower-trust caller or configured input path could perform moderation actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach the affected path.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7