# Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs

Source: https://junglewise.ai/threats/duplicate-advisory-browser-cdp-discovery-could-accept-blocked-websocket-6e8b9668  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14  
License: CC BY 4.0 with a link back

Severity: high · CVSS 8.5 · Published 2026-07-14

## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-3x84-qq85-fj65. This link is maintained to preserve external references.

## Original Description
OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled.

Technologies: [openclaw (npm)](https://junglewise.ai/threats/technologies/npm-openclaw). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** High severity, with a CVSS score of 8.5, published 14 July 2026.

**Which products and versions are affected?** openclaw (npm) < 2026.6.6, SEMVER:introduced=0,fixed=2026.6.6.

**Is there a fix for This vulnerability?** Yes. openclaw (npm): upgrade to 2026.6.6 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**Am I affected?** Check whether you run openclaw (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- openclaw (npm): upgrade to 2026.6.6 or later

  ```sh
  npm install openclaw@2026.6.6
  ```


## Affected products

- openclaw (npm) < 2026.6.6, SEMVER:introduced=0,fixed=2026.6.6

## Related threats

- [OpenClaw credential leakage via Authorization header forwarding in MCP SSE](https://junglewise.ai/threats/cve-2026-62208-openclaw-credential-leakage-via-authorization-header-forwarding)
- [OpenClaw policy bypass in browser CDP discovery](https://junglewise.ai/threats/cve-2026-62197-openclaw-policy-bypass-in-browser-cdp-discovery)
- [OpenClaw allowlist bypass in shell inline-command parsing](https://junglewise.ai/threats/cve-2026-53866-openclaw-allowlist-bypass-in-shell-inline-command-parsing)
- [OpenClaw path traversal in maintenance task execution](https://junglewise.ai/threats/cve-2026-53865-openclaw-path-traversal-in-maintenance-task-execution)
- [OpenClaw insufficient sanitization in host environment sanitizer](https://junglewise.ai/threats/cve-2026-53864-openclaw-insufficient-sanitization-in-host-environment-sanitizer)