Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q932-85w6-fmxr

Опубликовано: 14 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.3

Описание

OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.

OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.

EPSS

Процентиль: 14%
0.0023
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.3
nvd
около 1 месяца назад

OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.

EPSS

Процентиль: 14%
0.0023
Низкий

8.7 High

CVSS4

8.3 High

CVSS3

Дефекты

CWE-863