PT-2026-60615

CVE-2026-62205

Published

2026-07-17

Updated

2026-07-21

Description by

CVSS 3.1

7.1

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.4.12-beta.1 through 2026.6.5

Description The MS Teams message actions feature contains a missing-authorization flaw. This allows a lower-trust caller or a configured input path to execute actions that normally require stronger authorization or policy checks. The actual impact is determined by the operator's configuration and the accessibility of the input path to lower-trust sources.

Recommendations Update OpenClaw to version 2026.6.6.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers

CVE-2026-62205