CVE-2026-62202CWE-863

OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron

High · published July 17, 2026

CVSS v4.0
7.7
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. Attackers can execute or persist actions beyond their intended authorization by leveraging misconfigured input paths in the affected cron feature.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00543 · 44.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-07-17T00:06Z
EPSS history
Timeline
  • 17 JUL 00:06Z
    OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron
    cvelistv5