CVE-2026-62224
Received Received - Intake

Authorization Bypass in OpenClaw MS Teams via Mutable Display Name

Publication date: 2026-07-17

Last updated on: 2026-07-17

Assigner: VulnCheck

Description
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-17
Last Modified
2026-07-17
Generated
2026-07-17
AI Q&A
2026-07-17
EPSS Evaluated
N/A
NVD
CVE-2026-62224
EUVD
EUVD-2026-45112

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
openclaw ms_teams to 2026.5.12 (exc)
openclaw openclaw to 2026.5.12 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
CWE-290 This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

OpenClaw MS Teams before version 2026.5.12 has an authorization bypass flaw in the allowFrom feature. This feature incorrectly binds to mutable display names, allowing attackers with lower-trust access to perform actions that require stronger authorization. The vulnerability stems from improper handling of display names, enabling privilege escalation.

Detection Guidance

Check OpenClaw MS Teams version with npm list @openclaw/ms-teams. If version is below 2026.5.12, the system is vulnerable. Inspect configuration for allowFrom feature usage and validate display name binding logic in logs.

Impact Analysis

If you use OpenClaw MS Teams versions before 2026.5.12, attackers with limited access could exploit this to perform unauthorized actions that require higher privileges. This could lead to data breaches, unauthorized modifications, or other malicious activities depending on the actions permitted by the affected feature.

Compliance Impact

This vulnerability could lead to unauthorized access or data exposure, which may violate compliance requirements under GDPR, HIPAA, or other regulations. Organizations using affected versions risk non-compliance due to potential breaches of confidentiality and integrity controls.

Mitigation Strategies

Upgrade OpenClaw MS Teams to version 2026.5.12 or later. Disable the allowFrom feature if not required. Restrict feature access to trusted operators only. Monitor logs for unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-62224. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart