Executive brief
OpenClaw is a browser automation and debugging tool that uses the Chrome DevTools Protocol (CDP). A flaw in how it validates WebSocket URLs in CDP responses allows an authenticated attacker to redirect connections to arbitrary hosts, potentially accessing internal systems or services not directly reachable. An attacker could use this to perform second-hop attacks and access sensitive internal resources, compromising network security and potentially exposing internal infrastructure.
Technical details
The vulnerability exists in the CDP /json/version WebSocket endpoint where the webSocketDebuggerUrl response field is not properly validated before establishing connections. This is a server-side request forgery (CWE-918) vulnerability that allows an attacker with authentication credentials to pivot to untrusted second-hop targets. The attack vector is network-based, requires login credentials (PR:L), and does not require user interaction. An attacker can redirect the WebSocket connection to arbitrary hosts, enabling SSRF-style attacks to access internal systems. The fix, implemented in commit bc356cc8c2beaa747c71dd86cceab8f804699665, normalizes and re-validates direct CDP WebSocket targets before connecting. The issue was patched in version 2026.4.5 and later versions.
Affected products
- OpenClaw openclaw < 2026.4.5
Timeline
- 2026-04-16: disclosed
- 2026-04-16: patched: Fixed in version 2026.4.5