CVE-2026-100589

Summary

OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform host browser operations, inspecting or manipulating the connected browser profile and its authenticated state.

Affected Software

VendorProductVersion RangeStatus
OpenClawOpenClaw0 < 2026.7.1affected
OpenClawOpenClaw2026.7.1unaffected

Weaknesses

  • CWE-863: Incorrect Authorization

References