PT-2026-60613 · Openclaw · Openclaw
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions 2026.6.1 through 2026.6.8
Description
Isolated cron jobs contain a privilege escalation issue that allows lower-trust callers to regain access to denied execution tools. Attackers can execute or persist actions beyond their intended authorization by leveraging misconfigured input paths within the cron feature.
Recommendations
Update OpenClaw to version 2026.6.9.
Exploit
Fix
LPE
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw