CVE-2026-62211CWE-532

OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export

Medium · published July 17, 2026

CVSS v4.0
4.1
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose sensitive credentials and data through the export mechanism.

The record
Technical detail
CVSS v4.0
4.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00150 · 3.8th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-07-17T00:06Z
EPSS history
Timeline
  • 17 JUL 00:06Z
    OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export
    cvelistv5