PT-2026-60621 · Openclaw · Openclaw
CVE-2026-62211
·
Published
2026-07-17
·
Updated
2026-07-17
CVSS v3.1
5.0
Medium
| Vector | AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.6.1
Description
A credential redaction bypass exists in the trajectory export feature. This issue allows lower-trust callers to access sensitive credentials and data that should remain within trusted boundaries by exploiting misconfigured input paths or feature accessibility.
Recommendations
Update to version 2026.6.1 or later.
Exploit
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw