CVE-2026-62224 describes an authorization bypass vulnerability in OpenClaw MS Teams prior to version 2026.5.12. The issue arises because the allowFrom feature binds authorization to mutable display names, which can be spoofed by attackers with limited privileges. This allows them to escalate their permissions and perform actions that should require higher authorization levels. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Attackers with lower-trust access can bypass authorization controls by spoofing mutable display names, enabling them to perform actions that require stronger authorization. The impact is limited by the low CVSS score and the requirement for some level of existing access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to trusted users and monitor for suspicious activity related to display name changes or authorization anomalies.