CVE-2026-43581

The vulnerability stems from an overly broad CDP (Chrome DevTools Protocol) relay binding configuration in the sandboxed browser — instead of listening only on the local interface (localhost/127.0.0.1), the service exposes CDP on all network interfaces (0.0.0.0). An attacker with access to the same network (attack vector AV:A) can connect to the DevTools protocol without authentication and perform operations beyond sandbox isolation boundaries.

An attacker can gain full access to browser sessions via Chrome DevTools Protocol, enabling reading and modifying sensitive data, executing JavaScript code in the browser context, and potentially breaking sandbox isolation. High impact on confidentiality, integrity, and availability affects both local components and external systems (C:H/I:H/A:H).

OpenClaw should be updated to version 2026.4.10 or later, which fixes the CDP relay binding configuration (commit fbf11ebdb7110632f93926d0ac7b48f04cb44d77). Until the update is deployed, it is recommended to restrict network access to CDP ports using firewall rules and isolate hosts running OpenClaw from untrusted network segments.

OpenClaw versions before 2026.4.10