CVE-2026-62215 — HIGH (8.0)

Q: How severe is CVE-2026-62215?

CVE-2026-62215 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2026-62215?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.

Vulnerability Description

OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers can perform actions requiring stronger authorization by submitting crafted requests through configured input paths, bypassing intended policy checks.

CVSS Score

8.0

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Openclaw	Openclaw	< 2026.6.5

Related Weaknesses (CWE)

CWE-345

References

https://github.com/openclaw/openclaw/security/advisories/GHSA-vr7j-7684-7gm5MitigationVendor Advisory
https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-http-canThird Party Advisory

FAQ

What is CVE-2026-62215?

CVE-2026-62215 is a vulnerability with a CVSS score of 8.0 (HIGH). OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge trusted A2UI actions. Attackers can perform actions r...

How severe is CVE-2026-62215?

CVE-2026-62215 has been rated HIGH with a CVSS base score of 8.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-62215?

Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.