Vulnerability Description
OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose sensitive credentials and data through the export mechanism.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.6.1 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-j4cx-jvq7-79vmMitigationVendor Advisory
- https://www.vulncheck.com/advisories/openclaw-credential-redaction-bypass-via-trThird Party Advisory
FAQ
What is CVE-2026-62211?
CVE-2026-62211 is a vulnerability with a CVSS score of 5.0 (MEDIUM). OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted ...
How severe is CVE-2026-62211?
CVE-2026-62211 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-62211?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.