OpenClaw before 2026.5.28 contains a race condition in the MS Teams safeFetch DNS rebinding check. (CVE-2026-62212)

The vulnerability (CVE-2026-62212) in OpenClaw prior to version 2026.5.28 is a race condition in the MS Teams safeFetch DNS rebinding check. When this feature is enabled and accessible, an attacker with lower trust or controlled input may exploit a timing window between DNS validation and subsequent use, potentially performing actions that require higher authorization or policy enforcement. The impact is configuration-dependent, and no exploit in the wild has been reported. The CVSS 4.0 vector indicates network attack vector, high attack complexity, partial privileges required, and partial impact, with an overall medium severity.

This vulnerability could allow an attacker with lower trust or controlled input to bypass authorization or policy checks by exploiting a race condition in DNS rebinding validation. The actual impact depends on the operator's configuration and whether the vulnerable code path is reachable by lower-trust input. No known exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Operators should review their configuration to limit exposure of the affected feature and restrict lower-trust input paths where possible until a fix is confirmed.