Is CVE-2026-62196 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-62196?

CVE-2026-62196 has a CVSS v3 severity of HIGH (8.3).

Back

CVE-2026-62196

Description

OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowlists. Attackers with lower-trust access can perform actions requiring stronger authorization by leveraging group ID validation in the affected feature.