Live › vulnerability › CVE-2026-62197
Go to dashboardOpenClaw's browser CDP discovery accepted WebSocket URLs that its own policy should have blocked. An attacker who can feed lower-trust input into that path can make OpenClaw reach internal network destinations it is meant to refuse.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 5h before NVD. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| openclaw | npm | < 2026.6.6 | 2026.6.6 |
| openclaw | vendor | < 2026.6.6 | 2026.6.6 |
npm ls openclaw to find the installed version; affected if below 2026.6.62026.6.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Browser CDP discovery could accept blocked WebSocket URLs. In affected versions, a lower-trust caller or configured input path could reach network destinations that should have been blocked by OpenClaw policy.
This advisory is scoped to the named feature and configuration. It does not change OpenClaw's trusted-operator model: authenticated Gateway operators, installed plugins, and intentional local execution surfaces remain trusted unless a separate policy, approval, allowlist, sandbox, or auth boundary is crossed.
When the affected feature is enabled and reachable, this could reach network destinations that should have been blocked by OpenClaw policy. Practical impact depends on the operator's configuration and whether lower-trust input can reach that path.
The first stable patched version is 2026.6.6.
Upgrade to a patched OpenClaw release when one is listed. Before upgrading, restrict the affected feature to trusted operators or disable it when it is not needed. As general hardening, keep channel and tool allowlists narrow, avoid sharing one Gateway between mutually untrusted users, and disable the affected feature when it is not needed.
This page as .md · .json · in your agent: get_signal("CVE-2026-62197")
GitHub Advisory Database, CC-BY 4.0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.