high8.5
CVE-2026-62226
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL chec…
Impact
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openclaw | Openclaw | from 2026.3.28 before 2026.5.19 |