Executive brief
OpenClaw is a Node.js-based browser proxy tool that manages browser profiles through an allowlist feature. An attacker with network access could bypass the profile allowlist restriction through persistent profile mutation and runtime selection, potentially gaining unauthorized access to browser profiles that should be blocked by the allowProfiles configuration.
Technical details
This is an improper access control vulnerability (CWE-863) in the Node browser proxy's allowProfiles enforcement mechanism. The vulnerability allows bypassing the profile allowlist through two attack vectors: persistent profile mutation (modifying existing profiles to circumvent restrictions) and runtime profile selection (selecting profiles at request time via query or body parameters). The fix enforces allowProfiles validation across both query.profile and body.profile parameters and blocks proxy-side profile creation and deletion when the allowlist is configured. The vulnerability requires network access to the proxy but does not require special privileges or user interaction.
Affected products
- OpenClaw OpenClaw <=2026.3.13-1
Timeline
- 2026-04-03: disclosed
- 2026-03-23: patched: Fixed in v2026.3.22