Medium severity · published Jul 17, 2026
CVE-2026-62214
OpenClaw < 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validation
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. Attackers can supply malicious serviceUrl values through configured input paths to retrieve sensitive authentication data outside the trusted boundary.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MS
msteams · openclaw
before 2026.5.28 · source: vendor
OP
Openclaw · Openclaw
before 2026.5.28 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-62214
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-62214
vendor-advisory
https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr
third-party-advisory
https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation
More from msteams
6.5
CVE-2026-100582
OpenClaw Channel Plugins before 2026.8.1 Channel Read Allowlist Bypass
6.5
CVE-2026-62213
OpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requests
5.4
CVE-2026-62224
OpenClaw MS Teams < 2026.5.12 Authorization Bypass