← Database

CVE-2026-62196

HIGH CVSS: 8.3 Published: 2026-07-13 Modified: 2026-07-15

Description

OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.

Affected Platforms

Openclaw Openclaw

Weakness Type

CWE-863

References