EUVD-2026-43537

OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs...

CVE-2026-62197

CVE-2026-62197: OpenClaw before 2026.6.6 has a policy bypass in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that the OpenClaw policy should block when the affected feature is enabled. Affected product/version: OpenCla...

CVE-2026-62197 OpenClaw < 2026.6.6 Policy Bypass via CDP Discovery

OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled...

PT-2026-57899

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.6.6 Description A policy bypass exists in the browser CDP Chrome DevTools Protocol discovery feature. This issue allows the system to accept blocked WebSocket URLs, enabling attackers with lower-trust access to...