PT-2026-60630 · Openclaw · Openclaw

Ylwango613

·

CVE-2026-62220

·

Published

2026-07-17

·

Updated

2026-07-21

CVSS v4.0

6.3

Medium

VectorAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.25 through 2026.5.25
Description A flaw allows a lower-trust caller or configured input path to bypass non-browser rate limits during WebSocket authentication attempts. If the affected feature is enabled and accessible to lower-trust input, it can lead to the consumption of gateway resources and a reduction in service availability.
Recommendations Update OpenClaw to version 2026.5.26.

Exploit

Fix

Improper Restriction of Excessive Authentication Attempts

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2026-62220
GHSA-5P6W-WMH3-FRFR

Affected Products

Openclaw