Beveiligingsadvies

CVE-2026-62189

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-13 21:30:12
Laatst bijgewerkt 2026-07-15 04:00:15
Toegewezen door VulnCheck
CVSS-score 7.6
Status PUBLISHED

Beschrijving

OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requiring stronger authorization. Attackers can exploit remote symlink parents to bypass policy checks and authorization boundaries when the feature is enabled and reachable.