CVE-2026-62224 — OpenClaw MS Teams < 2026.5.12 Authorization Bypass
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access ca…
Published: 2026-07-17 · CVSS: 2.3 · CVSS 4.0
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7