PT-2026-38236 · Openclaw · Openclaw

R1Kko1337 · CVE-2026-43581 · Published 2026-04-17 · Updated 2026-05-14

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.10

Description An improper network binding issue exists in the sandbox browser CDP relay, which exposes the Chrome DevTools Protocol on 0.0.0.0. This overly broad binding configuration allows attackers to access the DevTools protocol from outside the intended local sandbox boundaries.

Recommendations Update to version 2026.4.10.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-1188

CWE-1327

CWE-284

Related Identifiers

CVE-2026-43581

GHSA-525J-HQQ2-66R4

Affected Products

Openclaw

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43581.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-525j-hqq2-66r4 · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/fbf11ebdb7110632f93926d0ac7b48f04cb44d77 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43581 · Security Note
• https://osv.dev/vulnerability/GHSA-525j-hqq2-66r4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-43581 · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/pull/61404 · Note
• https://twitter.com/VulmonFeeds/status/2052164086381633636 · Twitter Post
• https://vulncheck.com/advisories/openclaw-chrome-devtools-protocol-exposure-via-overly-broad-cdp-relay-binding · Note
• https://twitter.com/CVEnew/status/2052430116567838762 · Twitter Post
• https://twitter.com/lyrie_ai/status/2054777765388275869 · Twitter Post
• https://twitter.com/PurpleOps_io/status/2052245139209253372 · Twitter Post