CVE-2026-62201 MEDIUM 4.9 Openclaw — OpenClaw versions before 2026.6.6 contain a network policy bypass vulnerability in the sandbox exec-server tha… 2026-07-17 CVE-2026-62202 HIGH 7.7 Openclaw — OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs … 2026-07-17 CVE-2026-62203 HIGH 7.7 Openclaw — OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fa… 2026-07-17 CVE-2026-62205 MEDIUM 6 Openclaw — OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Tea… 2026-07-17 CVE-2026-62206 MEDIUM 6 Openclaw — OpenClaw versions before 2026.6.9 contain a missing authorization vulnerability in Discord moderation actions.… 2026-07-17 CVE-2026-62207 HIGH 7.7 Openclaw — OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust calle… 2026-07-17 CVE-2026-62208 MEDIUM 6 Openclaw — OpenClaw before 2026.6.5 could forward Authorization headers during MCP SSE redirects. When the affected featu… 2026-07-17 CVE-2026-62209 HIGH 7.6 Openclaw — OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mod… 2026-07-17 CVE-2026-62210 MEDIUM 6 Openclaw — OpenClaw versions before 2026.6.1 contain a denial of service vulnerability where remote media URLs can trigge… 2026-07-17 CVE-2026-62211 MEDIUM 4.1 Openclaw — OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export… 2026-07-17 CVE-2026-62212 MEDIUM 5.1 Openclaw — OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. When the af… 2026-07-17 CVE-2026-62213 MEDIUM 6 Msteams — OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that al… 2026-07-17 CVE-2026-62214 MEDIUM 6 Msteams — OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allo… 2026-07-17 CVE-2026-62215 MEDIUM 5.1 Openclaw — OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that… 2026-07-17 CVE-2026-62216 LOW 2.3 Openclaw — OpenClaw 2026.4.20 before 2026.5.28 contain a policy bypass in the QQBot media upload feature. A lower-trust c… 2026-07-17 CVE-2026-62217 HIGH 7.7 Openclaw — OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. … 2026-07-17 CVE-2026-62218 HIGH 8.7 Openclaw — OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve f… 2026-07-17 CVE-2026-62219 MEDIUM 6 Openclaw — OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds… 2026-07-17 CVE-2026-62220 MEDIUM 6.3 Openclaw — OpenClaw 2026.2.25 before 2026.5.26 allow a lower-trust caller or configured input path to bypass non-browser … 2026-07-17 CVE-2026-62221 LOW 2.3 Openclaw — OpenClaw 2026.5.12 before 2026.5.26 contain an incorrect authorization vulnerability in the ClickClack allowFr… 2026-07-17 CVE-2026-62222 HIGH 7.1 Openclaw — OpenClaw before 2026.5.22 contain a vulnerability in setup-mode discovery that allows loading of untrusted wor… 2026-07-17 CVE-2026-62223 HIGH 7.7 Openclaw — OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature th… 2026-07-17 CVE-2026-62224 LOW 2.3 Msteams — OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature b… 2026-07-17 CVE-2026-62225 LOW 2.3 Openclaw — OpenClaw versions before 2026.5.18 contain an authorization bypass vulnerability in skill command dispatch tha… 2026-07-17 CVE-2026-62226 MEDIUM 5.1 Openclaw — OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route tha… 2026-07-17 CVE-2026-62227 MEDIUM 4.9 Openclaw — OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot ro… 2026-07-17 CVE-2026-62228 HIGH 7.7 Openclaw — OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lowe… 2026-07-17 CVE-2026-62229 HIGH 7.7 Openclaw — OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that a… 2026-07-17 CVE-2026-62186 HIGH 7.2 Openclaw — OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP mode… 2026-07-13 CVE-2026-62187 HIGH 8.6 Feishu — OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablem… 2026-07-13 CVE-2026-62188 HIGH 8.6 Feishu — OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in wh… 2026-07-13 CVE-2026-62189 HIGH 7.6 Openclaw — OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that al… 2026-07-13 CVE-2026-62190 HIGH 8.7 Openclaw — OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allo… 2026-07-13 CVE-2026-62191 HIGH 7.1 Openclaw — OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in message mutation h… 2026-07-13 CVE-2026-62192 HIGH 7.2 Openclaw — OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild acti… 2026-07-13 CVE-2026-62193 MEDIUM 6.9 Openclaw — OpenClaw versions 2026.6.5 before 2026.6.9 contain a vulnerability in the plugin install wrappers that could s… 2026-07-13 CVE-2026-62194 HIGH 8.7 Openclaw — OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install com… 2026-07-13 CVE-2026-62195 HIGH 8.7 Openclaw — OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback … 2026-07-13 CVE-2026-62196 HIGH 8.7 Openclaw — OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group… 2026-07-13 CVE-2026-62197 MEDIUM 6.3 Openclaw — OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked … 2026-07-13 CVE-2026-62198 MEDIUM 5.3 Openclaw — OpenClaw versions 2026.5.28 before 2026.6.6 contain an authorization bypass vulnerability in native web search… 2026-07-13 CVE-2026-62199 HIGH 8.7 Openclaw — OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter … 2026-07-13 CVE-2026-62200 HIGH 8.7 Openclaw — OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext t… 2026-07-13