Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qhh8-mfpm-5j6c

Опубликовано: 14 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.2
CVSS3: 7.6

Описание

OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to bypass admin authorization policies and execute restricted operations.

OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to bypass admin authorization policies and execute restricted operations.

EPSS

Процентиль: 9%
0.00192
Низкий

7.2 High

CVSS4

7.6 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 7.6
nvd
около 1 месяца назад

OpenClaw versions before 2026.6.8 contain an authorization bypass vulnerability in OpenAI-compatible HTTP model overrides that allows lower-trust callers to perform actions requiring stronger authorization checks. Attackers can exploit misconfigured input paths to bypass admin authorization policies and execute restricted operations.

EPSS

Процентиль: 9%
0.00192
Низкий

7.2 High

CVSS4

7.6 High

CVSS3

Дефекты

CWE-862