Vulnerability Description
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. Attackers can exploit remote symlink parents to bypass policy checks and authorization boundaries when the feature is enabled and reachable.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.6.9 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-m38g-vpwj-mpg9MitigationVendor Advisory
- https://www.vulncheck.com/advisories/openclaw-symlink-following-via-mirror-syncThird Party Advisory
FAQ
What is CVE-2026-62189?
CVE-2026-62189 is a vulnerability with a CVSS score of 7.1 (HIGH). OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. Attackers ca...
How severe is CVE-2026-62189?
CVE-2026-62189 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-62189?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.