← Database

CVE-2026-62197

HIGH CVSS: 8.5 Published: 2026-07-13 Modified: 2026-07-14

Description

OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled.

Affected Platforms

Openclaw Openclaw

Weakness Type

CWE-918

References