PT-2026-99225 · Openclaw · Openclaw
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
OpenClaw versions prior to 2026.7.1
Description
A sandbox bypass exists in the browser tool that allows sandboxed sessions to access paired node browser actions, even when the
allowHostControl variable is set to false. An attacker who controls sandboxed agent input can select a paired node to perform host browser operations, enabling the inspection or manipulation of the connected browser profile and its authenticated state.Recommendations
Update to version 2026.7.1 or later.
Exploit
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openclaw