OpenClaw improper access control in sandbox browser CDP relay

Executive brief

OpenClaw, a sandbox browser environment, contains a vulnerability where its internal browser control interface is exposed to the broader network. This could allow an attacker on the same network to take control of the sandbox browser, potentially accessing sensitive data or interfering with browser operations. Users should upgrade to version 2026.4.10 or later to ensure these controls are restricted to the local environment.

Technical details

The OpenClaw sandbox browser CDP (Chrome DevTools Protocol) relay incorrectly binds to the 0.0.0.0 IP address instead of restricting access to the local or sandbox source range. This improper access control (CWE-284) and binding to an unrestricted IP address (CWE-1327) allows attackers with adjacent network access and low privileges to interact with the DevTools protocol. An attacker can leverage this to monitor or manipulate the browser session within the sandbox. The fix, introduced in version 2026.4.10, enforces source-range restrictions by default and prevents broad network exposure unless explicitly configured.

Affected products

• openclaw openclaw < 2026.4.10

Timeline

• 2026-04-16: patched: First stable tag v2026.4.10 released
• 2026-04-17: advisory: GitHub Advisory published

References

• https://api.github.com/users/R1kko1337
• https://github.com/R1kko1337
• https://api.github.com/users/R1kko1337/gists%7B/gist_id%7D
• https://api.github.com/users/R1kko1337/repos
• https://avatars.githubusercontent.com/u/247912430?v=4
• https://api.github.com/users/R1kko1337/events%7B/privacy%7D