{"vulnerability": "CVE-2026-6220", "sightings": [{"uuid": "b2b862a0-6ff8-4eb1-8e63-2554cd37e5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgauzyo6p2t", "content": "", "creation_timestamp": "2026-04-14T01:42:24.839729Z"}, {"uuid": "8135bd78-19c0-449b-a52a-c39dd350d07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqks6zjmmw2z", "content": "CVE-2026-62200 - OpenClaw\nCVE ID : CVE-2026-62200\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected fe...", "creation_timestamp": "2026-07-13T22:59:13.896908Z"}, {"uuid": "51ca8d76-933d-4364-89be-6c1b7816b67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62200", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqojntm37626", "content": "\ud83d\udccc CVE-2026-62200 - OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected... https://www.cyberhub.blog/cves/CVE-2026-62200", "creation_timestamp": "2026-07-15T10:37:06.177933Z"}, {"uuid": "fb8551b4-b2c9-42c4-9a44-7f590a166cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqkt3uoy2m", "content": "CVE-2026-62207 - OpenClaw\nCVE ID : CVE-2026-62207\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers c...", "creation_timestamp": "2026-07-17T02:51:20.205816Z"}, {"uuid": "e130340d-4994-400c-8754-fda69954b88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqtgyf7t2x", "content": "CVE-2026-62209 - OpenClaw 2026.5.10-beta.1\nCVE ID : CVE-2026-62209\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which ...", "creation_timestamp": "2026-07-17T02:56:09.749726Z"}, {"uuid": "38cd59cc-24aa-45fc-a044-c7c09db1e625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqydgkra2n", "content": "CVE-2026-62203 - OpenClaw\nCVE ID : CVE-2026-62203\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup var...", "creation_timestamp": "2026-07-17T02:58:53.739373Z"}, {"uuid": "0864918e-3b06-446b-9c40-fbfb179a6559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssmwu5wm2n", "content": "CVE-2026-62202 - OpenClaw 2026.6.1\nCVE ID : CVE-2026-62202\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to...", "creation_timestamp": "2026-07-17T03:28:18.769555Z"}, {"uuid": "a6f139e4-a904-4024-8c7b-a4234da7a100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "seen", "source": "https://t.me/GithubRedTeam/101779", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62201-OpenClaw-SSRF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diedromeo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 07:12:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDeep-dive analysis of CVE-2026-62201: OpenClaw sandbox exec-server network policy bypass (SSRF). Root cause, vulnerable vs patched code, exploitation, detection, remediation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T10:00:06.132030Z"}, {"uuid": "2cfdb30c-facf-4a27-88b7-56b547d5d573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "seen", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-09T16:00:06.172927Z"}, {"uuid": "c7e104f0-7c2d-48cd-9fd8-bc3d09baa6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "published-proof-of-concept", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-10T00:00:34.371451Z"}, {"uuid": "5bbf1329-02c2-4c34-ab36-a569d2b01cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101779", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62201-OpenClaw-SSRF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diedromeo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 07:12:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDeep-dive analysis of CVE-2026-62201: OpenClaw sandbox exec-server network policy bypass (SSRF). Root cause, vulnerable vs patched code, exploitation, detection, remediation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.875224Z"}]}