CVE-2026-62211

Executive Summary

CVE-2026-62211 is a credential redaction bypass vulnerability in OpenClaw versions prior to 2026.6.1. The flaw resides in the trajectory export feature, where lower-trust callers can access sensitive data that should remain within trusted boundaries. Attackers can exploit misconfigured input paths or feature accessibility to expose sensitive credentials and data through the export mechanism. This vulnerability has a CVSS score of 0.0 (pending analysis) and an EPSS score of 0.0%, indicating low exploitation likelihood at this time. No public proof-of-concept or exploit code is available.

Supply Chain & Package Security

This vulnerability affects the OpenClaw software package. Users should verify the integrity of their OpenClaw installation and ensure they are using a trusted source. The patch is available in version 2026.6.1.

CVSS Breakdown & Threat Level

• CVSS Score: 0.0 (Pending analysis)
• Attack Vector (AV): Network (likely)
• Attack Complexity (AC): Low (likely)
• Privileges Required (PR): Low (likely)
• User Interaction (UI): None (likely)
• Scope (S): Unchanged (likely)
• Confidentiality (C): High (likely)
• Integrity (I): None (likely)
• Availability (A): None (likely)
• Threat Level: Medium (due to potential credential exposure)

Deep Dive & Mechanics

The vulnerability exists in the trajectory export feature of OpenClaw. The feature is designed to export trajectory data, but it fails to properly redact sensitive credentials and data when accessed by lower-trust callers. The issue arises from misconfigured input paths or feature accessibility, allowing attackers to bypass credential redaction and expose sensitive information.

The core problem is that the export function does not enforce proper access control checks or input validation. When a lower-trust caller requests an export, the system does not verify that the caller has the necessary permissions to access the sensitive data. Additionally, the input paths are not sanitized, allowing attackers to manipulate them to access data outside the intended scope.

Vulnerable vs. Patched Code

Vulnerable Code (Conceptual):

def export_trajectory(user, trajectory_id):
    # No access control check
    data = get_trajectory_data(trajectory_id)
    # No credential redaction
    return data

Patched Code (Conceptual):

def export_trajectory(user, trajectory_id):
    # Access control check
    if not user.has_permission('export_trajectory'):
        raise PermissionError("Insufficient permissions")
    data = get_trajectory_data(trajectory_id)
    # Credential redaction
    data = redact_credentials(data)
    return data

Exploitation & Lab Setup

Red Team

1. Setup: Deploy a vulnerable OpenClaw instance (version < 2026.6.1).
2. Reconnaissance: Identify the trajectory export endpoint (e.g., /api/export/trajectory).
3. Exploitation: Send a request to the export endpoint with a lower-trust user token and manipulate the input path to access sensitive data.

   curl -X POST "http://target/api/export/trajectory" \
        -H "Authorization: Bearer <low_trust_token>" \
        -d "trajectory_id=../../etc/passwd"
   

4. Data Exfiltration: Capture the response containing sensitive credentials.

Blue Team

1. Detection: Monitor for unusual access patterns to the trajectory export endpoint.
2. Mitigation: Apply the patch by upgrading to OpenClaw version 2026.6.1.
3. Hunting: Review logs for unauthorized access attempts to the export feature.
4. Response: If exploitation is detected, revoke compromised credentials and rotate all secrets.

Indicators of Compromise (IOCs)

• Network: Unusual requests to /api/export/trajectory with path traversal patterns (e.g., ../).
• Logs: Failed permission checks or access denied errors followed by successful exports.
• System: Presence of exported files containing credentials in unexpected locations.
• User: Lower-trust users accessing the export feature without proper authorization.

Detection Engineering

YARA Rule

rule CVE_2026_62211_OpenClaw_Credential_Exposure {
    meta:
        description = "Detects credential exposure in OpenClaw trajectory export"
        author = "Valters IT"
        date = "2026-06-01"
        reference = "CVE-2026-62211"
    strings:
        $credential_pattern = /(password|secret|token|api_key)\s*[:=]\s*["'][^"']+["']/i
        $export_pattern = /export.*trajectory/i
    condition:
        $credential_pattern and $export_pattern
}

Sigma Rule

title: OpenClaw Trajectory Export Credential Exposure
id: 8a9b7c6d-5e4f-3a2b-1c0d-9e8f7a6b5c4d
status: experimental
description: Detects attempts to exploit CVE-2026-62211 by accessing trajectory export with path traversal
author: Valters IT
date: 2026-06-01
logsource:
    category: web
    product: openclaw
detection:
    selection:
        cs-method: 'POST'
        cs-uri-stem: '/api/export/trajectory'
        cs-uri-query|contains: '../'
    condition: selection
falsepositives:
    - Legitimate use of path traversal in other contexts
level: high

Suricata Rule

alert http $HOME_NET any -> $EXTERNAL_NET any (
    msg:"CVE-2026-62211 OpenClaw Trajectory Export Credential Exposure";
    flow:to_server,established;
    content:"POST"; http_method;
    content:"/api/export/trajectory"; http_uri;
    content:"../"; http_uri;
    sid:1000001;
    rev:1;
    reference:cve,2026-62211;
    classtype:attempted-recon;
    priority:1;
)

Remediation & Mitigation

1. Immediate: Upgrade to OpenClaw version 2026.6.1 or later.
2. Workaround: If immediate upgrade is not possible, restrict access to the trajectory export feature to only trusted users and networks.
3. Configuration: Review and harden input validation and access control for all export features.
4. Monitoring: Enable logging and monitoring for the export endpoint to detect exploitation attempts.
5. Credential Rotation: Rotate any credentials that may have been exposed.

Valters IT