Is CVE-2026-62226 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-62226?

CVE-2026-62226 has a CVSS v3 severity of HIGH (8.5).

Back

CVE-2026-62226

Description

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.