Описание
OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.
Ссылки
- MitigationVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 2026.3.22 (включая) до 2026.6.6 (исключая)
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 14%
0.0023
Низкий
8.3 High
CVSS3
Дефекты
CWE-863
Связанные уязвимости
CVSS3: 8.3
github
около 1 месяца назад
OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.
EPSS
Процентиль: 14%
0.0023
Низкий
8.3 High
CVSS3
Дефекты
CWE-863