medium5.4
CVE-2026-62224
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names.
Impact
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.
Affected products
| Product | Affected versions |
|---|---|
| OpenClaw MS Teams | before 2026.5.12 |
Versions were read from the advisory text. No structured product data has been published for this record yet.