Executive brief
OpenClaw is an AI assistant platform. A security flaw in its sandbox component allowed unauthorized access to interactive browser sessions. This could lead to the exposure of session credentials and allow an attacker to view or interact with a user's browser session without proper authentication.
Technical details
A vulnerability exists in OpenClaw where the sandbox noVNC helper route was accessible without the required bridge authentication (CWE-306). This allowed unauthenticated network attackers to reach the interactive browser session surface and potentially obtain session credentials. The root cause was a failure to gate the specific helper route behind the application's authentication bridge. The issue has been resolved in version 2026.4.10 by enforcing bridge authentication for the affected route.
Affected products
- openclaw openclaw >= 2026.2.21 < 2026.4.10
Timeline
- 2026-04-16: patched: First stable tag v2026.4.10 released
- 2026-04-17: advisory
References
- https://api.github.com/users/smaeljaish771
- https://github.com/smaeljaish771
- https://api.github.com/users/smaeljaish771/gists%7B/gist_id%7D
- https://api.github.com/users/smaeljaish771/repos
- https://avatars.githubusercontent.com/u/266604088?v=4
- https://api.github.com/users/smaeljaish771/events%7B/privacy%7D