What is GHSA-rqg5-28vh-5645?

GHSA-rqg5-28vh-5645 is a security advisory published by GitHub Security Advisories with High severity. OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in...

Which CVE IDs does GHSA-rqg5-28vh-5645 cover?

GHSA-rqg5-28vh-5645 covers the following CVE IDs: CVE-2026-62194. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-rqg5-28vh-5645?

GHSA-rqg5-28vh-5645 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-rqg5-28vh-5645HighCVSS 8.8

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in...

Vendor

GitHub Security Advisories

Published

July 14, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2026-62194 →

📋 Description

OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers to execute or persist actions beyond their intended authorization. Attackers can exploit misconfigured input paths or enabled features to escalate privileges and perform unauthorized actions when the feature is reachable.

🔗 References (4)

https://github.com/openclaw/openclaw/security/advisories/GHSA-7vrr-rp4x-4g76
https://nvd.nist.gov/vuln/detail/CVE-2026-62194
https://www.vulncheck.com/advisories/openclaw-privilege-escalation-via-plugin-install
https://github.com/advisories/GHSA-rqg5-28vh-5645