CVE-2026-62192 and New OpenClaw Authorization Gaps

The CVE-2026-62192 batch covers authorization weaknesses rated CVSS 7.1–8.8. Additional reports include Signal approval-binding, diagnostics access, directory-bound exec approval, Windows denial of service, and sandbox SSRF concerns. Scope-Gap Injection findings highlight safety-review gaps when judges do not inspect all attachment content available to an agent, but are specific to the competition pipeline and incompletely validated.