Incorrect Authorization

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the browser tool's node target selection, which fails to enforce the allowHostControl=false configuration for sandboxed sessions. An attacker with control over...