CVE ID :CVE-2026-62199 Published : July 13, 2026, 10:16 p.m. | 16 minutes ago Description :OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected feature is enabled and reachable, a lower-trust caller...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-62199 - OpenClaw < 2026.6.6 Authentication Bypass via Environment Filtering

VERWANDTEARTIKEL

CVE-2026-62240 - CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools

CVE-2026-62242 - Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

CVE-2026-62327 - 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats

CVE-2026-62328 - 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints

CVE-2026-62195 - OpenClaw 2026.5.20 < 2026.6.6 Authorization Bypass via MCP loopback

CVE-2026-62196 - OpenClaw 2026.3.22 < 2026.6.6 Authorization Bypass via WhatsApp Group IDs