Approved changes feed: RSS · Atom
cpe:2.3:a:openclaw:msteams:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openclaw (f30ff96c-0f84-5ff5-a7cf-8ffe11a8c46e) |
|---|---|
| Product | Msteams (8c57d6b9-bbf4-5260-ac14-aaa0d56dd6ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-62224 |
vulnerable | 2026-07-29 01:06:19.016643 |
OpenClaw MS Teams < 2026.5.12 Authorization Bypass
MEDIUM (5.4)
OpenClaw MS Teams before 2026.5.12 contain an authorization bypass vulnerability where the allowFrom feature binds to mutable display names. Attackers with lower-trust access can perform actions requiring stronger authorization by exploiting the mutable display name binding in the affected feature.
Published: 2026-07-17T00:07:02.933Z
Updated: 2026-07-17T14:10:22.850Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62214 |
vulnerable | 2026-07-29 01:06:19.014560 |
OpenClaw < 2026.5.28 Bot Framework SSRF via serviceUrl Parameter Validation
MEDIUM (6.5)
OpenClaw versions before 2026.5.28 Bot Framework contains an improper input validation vulnerability that allows lower-trust callers to expose bot tokens and credentials by failing to properly validate serviceUrl parameters. Attackers can supply malicious serviceUrl values through configured input paths to retrieve sensitive authentication data outside the trusted boundary.
Published: 2026-07-17T00:06:56.206Z
Updated: 2026-07-17T10:44:22.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-62213 |
vulnerable | 2026-07-29 01:06:19.014338 |
OpenClaw < 2026.5.27 Token Leakage via MS Teams Outbound Requests
MEDIUM (6.5)
OpenClaw versions before 2026.5.27 contain a token leakage vulnerability in MS Teams outbound requests that allows lower-trust callers to expose Bot Framework tokens. Attackers can access configured input paths to retrieve credentials that should remain within the trusted boundary.
Published: 2026-07-17T00:06:55.533Z
Updated: 2026-07-20T23:34:19.682Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.