CVE-2026-62188: OpenClaw < 2026.6.9 Feishu Authorization Bypass

Q: What is the severity of CVE-2026-62188?

The severity of CVE-2026-62188 is rated high with a score of 8.6.

Q: How do I fix CVE-2026-62188?

To fix CVE-2026-62188, update OpenClaw to version 2026.6.9 or later.

Q: What software is affected by CVE-2026-62188?

CVE-2026-62188 affects OpenClaw @openclaw/feishu versions 2026.6.6 and earlier.

Q: What type of vulnerability is CVE-2026-62188?

CVE-2026-62188 is an authorization bypass vulnerability.

Q: What impact does CVE-2026-62188 have?

CVE-2026-62188 allows an unauthorized user to bypass per-account permission settings in the Feishu tools.

Published Jul 13, 2026

Updated

OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignore per-account disablement settings. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could perform actions that should have required a stronger authorization or policy check. The issue is fixed in version 2026.6.9.

Affected Software

2 affected components

openclaw/feishu<=2026.6.6

OpenClaw Openclaw\/feishu Node.js<2026.6.9

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenClaw @openclaw/feishu to a version that resolves this vulnerability.
Fixed in 2026.6.9

Event History

Jul 13, 2026

CVE Published

via MITRE·09:30 PM

Data Sourced

via MITRE·09:30 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-62188?

The severity of CVE-2026-62188 is rated high with a score of 8.6.

How do I fix CVE-2026-62188?