# CVE-2026-62214: OpenClaw Bot Framework credential leak via serviceUrl validation failure

Source: https://junglewise.ai/threats/cve-2026-62214-openclaw-bot-framework-credential-leak-via-serviceurl-validation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-17. Updated: 2026-07-17  
License: CC BY 4.0 with a link back

CVE-2026-62214 · Severity: medium · CVSS 6.5 · Published 2026-07-17

OpenClaw's Bot Framework, used for building and connecting automated bots to platforms like Microsoft Teams, contains a security flaw in how it handles service URLs. An attacker with low-level access can provide a malicious URL to trick the system into sending sensitive bot tokens and login credentials to an external server. This could lead to the unauthorized takeover of automated bots and the exposure of private communication channels.

Technologies: [Openclaw msteams (Bot Framework)](https://junglewise.ai/threats/technologies/msteams). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-62214 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-62214 being exploited in the wild.

**How severe is CVE-2026-62214?** Medium severity, with a CVSS score of 6.5, published 17 July 2026.

**Which products and versions are affected?** Openclaw msteams (Bot Framework) < 2026.5.28.

**Is there a fix for CVE-2026-62214?** A patch was published on 2026-05-28: First stable patched version released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-62214 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-62214?** Check whether you run Openclaw msteams (Bot Framework) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An improper input validation vulnerability exists in OpenClaw versions prior to 2026.5.28 within the Bot Framework (specifically the msteams package). The root cause is a failure to properly validate the 'serviceUrl' parameter provided by callers. A network-based attacker with low privileges can supply a malicious serviceUrl, causing the framework to transmit sensitive authentication data, including bot tokens and credentials, to an attacker-controlled endpoint. This is characterized as a Server-Side Request Forgery (SSRF) variant leading to credential exposure (CWE-522). The issue is resolved in version 2026.5.28.

## Affected products

- OpenClaw msteams (Bot Framework) < 2026.5.28

## Timeline

- 2026-06-30: advisory: GitHub Security Advisory published
- 2026-07-16: disclosed: NVD and VulnCheck published details
- 2026-05-28: patched: First stable patched version released

## References

- [https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr](https://github.com/openclaw/openclaw/security/advisories/GHSA-prwc-c6w5-mmgr)
- [https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation](https://www.vulncheck.com/advisories/openclaw-bot-framework-ssrf-via-serviceurl-parameter-validation)