CVE-2026-62200

OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport

Published Jul 13, 2026 CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Description

OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.

Analysis

Technical impact

OpenClaw versions before 2026.6.6 contain a flaw in host execution environment filtering that could be abused when the Git ext transport feature is enabled and reachable. A lower‑trust caller or an attacker can provide a crafted input path that allows execution or persistence of actions beyond the intended authorization, effectively bypassing authentication controls for Git ext transport operations.

Affected Systems

The affected product is OpenClaw by the OpenClaw team. Versions older than 2026.6.6 are vulnerable. Any installation of OpenClaw running a pre‑2026.6.6 release that has the Git ext transport feature enabled and reachable is at risk.

Risk and Exploitability

The CVSS score of 8.7 indicates a high severity impact. The EPSS score is currently reported as <1% and the vulnerability is not listed in CISA’s KEV catalog, implying limited exploitation data. Exploitation requires the Git ext transport feature to be enabled and externally reachable, so a remote attacker with network access to the service could abuse the flaw. No public exploit code has been disclosed, but the combination of high severity and remote accessibility means the risk warrants prompt action.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.6.6
`2026.6.6`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.6.6)`	affected	semver	—
`2026.6.6`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade OpenClaw to version 2026.6.6 or later.
Disable the Git ext transport feature if it is not required for your environment.
Ensure that any paths or inputs used with Git ext transport are strictly validated and restricted to trusted sources.

Generated by OpenCVE AI on July 31, 2026 at 11:10 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.525% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm
https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport

History

Nov 10, 2026 9:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jul 14, 2026 12:45 PM Description updated View changes

Type	Values Removed	Values Added
Description	OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.	OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.

Jul 13, 2026 9:45 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected feature is enabled and reachable, a lower-trust caller or configured input path could execute or persist actions beyond the caller's intended authorization.
Title		OpenClaw < 2026.6.6 Authentication Bypass via Git ext transport
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-184
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/security/advisories/GHSA-9969-8g9h-rxwm https://www.vulncheck.com/advisories/openclaw-authentication-bypass-via-git-ext-transport
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`