PT-2026-60630

CVE-2026-62220

Published

2026-07-17

Updated

2026-07-21

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions 2026.2.25 through 2026.5.25

Description A flaw allows a lower-trust caller or configured input path to bypass non-browser rate limits during WebSocket authentication attempts. If the affected feature is enabled and accessible to lower-trust input, it can lead to the consumption of gateway resources and a reduction in service availability.

Recommendations Update OpenClaw to version 2026.5.26.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-307: Improper Restriction of Excessive Authentication Attempts

Related identifiers

CVE-2026-62220