Executive brief
OpenClaw, a tool used for browser automation and gateway operations, contains a security flaw in how it handles browser actions. An attacker with low-level access can bypass security checks to perform actions they are not authorized to do, potentially leading to the exposure of sensitive data or unauthorized system changes. This could allow a restricted user to escalate their permissions or access information from browser tabs they should not be able to see.
Technical details
An authorization bypass and Server-Side Request Forgery (SSRF) vulnerability exists in OpenClaw's 'browser act' route. The component fails to properly validate current-tab URL checks, allowing a lower-trust caller or configured input path to bypass intended security boundaries. An authenticated attacker with low privileges can exploit this over the network to perform actions requiring stronger authorization or policy checks, potentially leading to a scope change where they can access sensitive data (Confidentiality: High). The issue is tracked as CWE-918 and CWE-284 and is fixed in version 2026.5.19.
Affected products
- OpenClaw OpenClaw >= 2026.3.28, < 2026.5.19
Timeline
- 2026-06-30: advisory: GitHub Security Advisory published
- 2026-07-17: disclosed: NVD publication date