PT-2026-60616

CVE-2026-62206

Published

2026-07-17

Updated

2026-07-17

Description by

CVSS 3.1

7.1

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.6.9

Description Discord moderation actions lack proper authorization. This allows a lower-trust caller or a configured input path to execute moderation tasks that should require a stronger authorization or policy check. The actual impact is determined by the operator's configuration and whether lower-trust input can access the affected path.

Recommendations Update to version 2026.6.9 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Hcamael

Vendors

Affected products

Weakness enumeration

CWE-862: Missing Authorization

Related identifiers