What is GHSA-jx9m-6q5c-jrgm?

GHSA-jx9m-6q5c-jrgm is a security advisory published by GitHub Security Advisories with Medium severity. OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks...

Which CVE IDs does GHSA-jx9m-6q5c-jrgm cover?

GHSA-jx9m-6q5c-jrgm covers the following CVE IDs: CVE-2026-62219. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jx9m-6q5c-jrgm?

GHSA-jx9m-6q5c-jrgm has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-jx9m-6q5c-jrgmMediumCVSS 7.1

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks...

Vendor

GitHub Security Advisories

Published

July 17, 2026

Last Modified

July 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-62219 →

📋 Description

OpenClaw 2026.2.12 before 2026.5.26 contain an authorization bypass vulnerability in the hooks allowedAgentIds validation. A lower-trust caller or configured input path can bypass agent ID restrictions by submitting blank agent IDs, allowing actions that should require stronger authorization or policy checks.

🔗 References (4)

https://github.com/openclaw/openclaw/security/advisories/GHSA-724r-v4wf-mqc5
https://nvd.nist.gov/vuln/detail/CVE-2026-62219
https://www.vulncheck.com/advisories/openclaw-authorization-bypass-via-blank-agent-ids
https://github.com/advisories/GHSA-jx9m-6q5c-jrgm