CVE-2026-62211: OpenClaw < 2026.6.1 Credential Redaction Bypass via Trajectory Export

Q: What is the severity of CVE-2026-62211?

The severity of CVE-2026-62211 is rated as medium with a score of 4.1.

Q: How do I fix CVE-2026-62211?

To fix CVE-2026-62211, upgrade OpenClaw to version 2026.6.1 or later.

Q: What does CVE-2026-62211 affect?

CVE-2026-62211 affects OpenClaw versions prior to 2026.6.1, specifically the trajectory export feature.

Q: What type of vulnerability is CVE-2026-62211?

CVE-2026-62211 is a credential redaction bypass vulnerability.

Q: What can attackers do with CVE-2026-62211?

Attackers can exploit CVE-2026-62211 to access sensitive data that should be restricted, via misconfigured input paths or feature accessibility.

Published Jul 17, 2026

Updated

OpenClaw versions before 2026.6.1 contain a credential redaction bypass vulnerability in the trajectory export feature that allows lower-trust callers to access data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose sensitive credentials and data through the export mechanism.

Affected Software

2 affected components

OpenClaw OpenClaw<2026.6.1

OpenClaw Openclaw Node.js<2026.6.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade OpenClaw to a version that resolves this vulnerability.
Fixed in 2026.6.1

Event History

Jul 17, 2026

CVE Published

via MITRE·12:06 AM

Data Sourced

via MITRE·12:06 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:18 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-62211?

The severity of CVE-2026-62211 is rated as medium with a score of 4.1.

How do I fix CVE-2026-62211?