Vulnerability Details CVE-2026-62202
OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. Attackers can execute or persist actions beyond their intended authorization by leveraging misconfigured input paths in the affected cron feature.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 22.1%
CVSS Severity
CVSS v3 Score 8.8
References
Products affected by CVE-2026-62202
-
cpe:2.3:a:openclaw:openclaw:2026.6.1
-
cpe:2.3:a:openclaw:openclaw:2026.6.2
-
cpe:2.3:a:openclaw:openclaw:2026.6.3
-
cpe:2.3:a:openclaw:openclaw:2026.6.4
-
cpe:2.3:a:openclaw:openclaw:2026.6.5
-
cpe:2.3:a:openclaw:openclaw:2026.6.6
-
cpe:2.3:a:openclaw:openclaw:2026.6.7
-
cpe:2.3:a:openclaw:openclaw:2026.6.8