CVE-2026-62224
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Jul 17, 2026
Vendor
unknown
Description
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.