CVE-2026-62205 OpenClaw CVE debrief

Who should care

Users of OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 should be aware of this vulnerability and take necessary actions to protect their systems. This includes reviewing configurations for the MS Teams message actions feature, monitoring systems for potential exploitation attempts, and updating OpenClaw to version 2026.6.6 or later to fully address the vulnerability. The vulnerability's impact on confidentiality is not directly mentioned, but its potential for unauthorized actions suggests a need for heightened vigilance. Users must assess their specific configurations and exposure to determine the appropriate level of urgency for remediation.

Technical summary

The vulnerability has a CVSS score of 6 and a severity of MEDIUM. The CVSS vector is CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. The weakness is classified as CWE-862, a missing authorization issue. The vulnerability is located in the MS Teams message actions feature of OpenClaw versions 2026.4.12-beta.1 before 2026.6.6. When the affected feature is enabled and reachable, a lower-trust caller or a configured input path can perform actions that should have required a stronger authorization or policy check. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.

Defensive priority

MEDIUM HIGH based on CVSS score and potential impact on OpenClaw deployments. Operators should prioritize verification of affected systems and apply necessary mitigations or updates as soon as possible to prevent potential exploitation attempts through the MS Teams message actions feature. This vulnerability could allow attackers to perform unauthorized actions, potentially leading to data breaches or system compromise if exploited. Therefore, immediate attention and remediation are crucial for OpenClaw users to ensure the security of their systems and data. Additionally, users should review configurations for the MS Teams message actions feature and monitor systems for potential exploitation attempts to minimize the risk of this vulnerability being exploited in their environment. This should be done in conjunction with updating OpenClaw to version 2026.6.6 or later to fully address the vulnerability. The vulnerability's impact on confidentiality is not directly mentioned, but its potential for unauthorized actions suggests a need for heightened vigilance. Users must assess their specific configurations and exposure to determine the appropriate level of urgency for remediation. The CVSS vector is CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X, indicating a medium severity that requires immediate attention to prevent potential exploitation and minimize risk to OpenClaw deployments. The vulnerability's details suggest that it could be exploited by attackers with lower-trust callers or configured input paths, emphasizing the need for careful configuration and monitoring to prevent exploitation. The CVSS score of 6 and severity of MEDIUM highlight the importance of addressing this vulnerability promptly to protect OpenClaw systems from potential attacks. The vulnerability's classification as CWE-862, a missing authorization issue, further underscores the need for immediate remediation to prevent unauthorized actions that could compromise system security. In summary, OpenClaw users should treat this vulnerability with a defensive priority of

Recommended defensive actions

• Update OpenClaw to version 2026.6.6 or later
• Review and adjust configurations for the MS Teams message actions feature
• Monitor systems for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-07-17T02:18:06.747Z and has not been modified since then. The NVD entry is currently Received. The OpenClaw versions 2026.4.12-beta.1 before 2026.6.6 contain a missing-authorization vulnerability in the MS Teams message actions feature. Evidence of exploitation is not currently available, and defenders should verify affected scope and vendor guidance.

Official resources