CVE-2026-62228: 
OpenClaw (formerly Moltbot or Clawdbot) vulnerability analysis and mitigation

CVE-2026-62228 is an authorization bypass vulnerability in OpenClaw's node exec approvals feature that allows lower-trust callers to execute actions beyond their intended authorization by exploiting mismatched gateway and node environment configurations. It affects all OpenClaw (npm package) versions before 2026.6.5. The vulnerability was published on July 17, 2026, with the underlying GitHub Security Advisory (GHSA-8f46-3xx3-8c9m) published by maintainer joshavant on June 30, 2026. It carries a CVSS v3.1 base score of 8.8 (High) and a CVSS v4.0 base score of 7.7 (High) (GitHub Advisory, OpenClaw Advisory).

The root cause is classified as CWE-863 (Incorrect Authorization): the node exec approval mechanism fails to enforce consistent environment boundaries, allowing a lower-trust caller or configured input path to reference a different gateway environment than the node environment used during approval validation. This mismatch means that an attacker with low-privilege access can craft requests that pass authorization checks scoped to one environment while actually executing in another, effectively bypassing the intended permission boundary. The vulnerability is network-exploitable with low attack complexity and requires only low privileges, though CVSS v4.0 notes that specific attack requirements (a particular deployment/configuration condition) must be present. The advisory notes the scope is limited to the named feature and does not affect OpenClaw's trusted-operator model for authenticated Gateway operators, installed plugins, or intentional local execution surfaces (OpenClaw Advisory, GitHub Advisory).

Successful exploitation allows a lower-trust caller to execute or persist actions that exceed their approved permissions within the OpenClaw environment, with high impact to confidentiality, integrity, and availability of the vulnerable system. An attacker could read sensitive data, modify system state, or disrupt availability of the node execution environment. Practical impact is configuration-dependent — it is most severe when the affected node exec approval feature is enabled and reachable by lower-trust users or untrusted input paths (OpenClaw Advisory, GitHub Advisory).

The primary remediation is to upgrade OpenClaw to version 2026.6.5 or later, which is the first stable patched release (OpenClaw Advisory). Prior to upgrading, operators should restrict the node exec approval feature to trusted operators only, or disable it entirely when not needed. As general hardening, keep channel and tool allowlists narrow, avoid sharing a single Gateway between mutually untrusted users, and ensure gateway and node environment configurations are properly aligned and synchronized. Review and validate permission assignments for all users with node execution capabilities.

The vulnerability was reported by security researcher anshumanbh and assigned by VulnCheck. No notable broader media coverage, researcher commentary, or significant community discussion has been identified beyond the official advisory publication (OpenClaw Advisory).