CVE-2026-62223 — OpenClaw < 2026.5.18 Authorization Bypass via Device-pair
OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their inten…
Published: 2026-07-17 · CVSS: 7.7 · CVSS 4.0
OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute actions beyond their intended authorization. Attackers can exploit misconfigured input paths to execute or persist unauthorized actions when the affected feature is enabled and reachable.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7