Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/17 5:9 p.m.31 views

OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback

Summary The Chrome extension relay ensureChromeExtensionRelayServer previously treated wildcard hosts 0.0.0.0 / :: as loopback, which could make it bind the relay HTTP/WS server to all interfaces when a wildcard cdpUrl was passed. Impact If configured with a wildcard cdpUrl, relay HTTP endpoints...

9.1CVSS5.5AI score0.00396EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder