CVE-2026-62202: OpenClaw 2026.6.1 < 2026.6.9 Privilege Escalation via Cron
OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to regain denied execution tools. Attackers can execute or persist actions beyond their intended authorization by leveraging misconfigured input paths in the affected cron feature.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.6.9
Event History
Frequently Asked Questions
What is the severity of CVE-2026-62202?
CVE-2026-62202 has a severity rating of high, with a score of 7.7 on the CVSS scale.
How do I fix CVE-2026-62202?
To remediate CVE-2026-62202, upgrade OpenClaw to version 2026.6.9 or later.
What types of systems are affected by CVE-2026-62202?
CVE-2026-62202 affects systems running OpenClaw versions prior to 2026.6.9.
What kind of attack is associated with CVE-2026-62202?
CVE-2026-62202 is associated with privilege escalation attacks that exploit misconfigured input paths in cron jobs.
Can CVE-2026-62202 lead to data breaches?
Yes, CVE-2026-62202 can allow attackers to execute actions beyond their intended authorization, potentially leading to data breaches.