GHSA-hcm3-8f6r-6xwg: OpenClaw: Browser debug/export routes could reuse already-open blocked tabs
OpenClaw versions prior to 2026.4.29 have a vulnerability in browser debug/export routes where already-open blocked tabs could be reused without reapplying the expected SSRF policy. This allows an attacker with access to these routes to potentially export or inspect content from tabs that should be protected by browser network policies. The vulnerability affects the specific feature and configuration related to browser debug/export routes and does not alter the trusted-operator model of OpenClaw. The issue is mitigated by closing blocked tabs before using debug/export features and restricting access to these routes until patched.
AI Analysis
Technical Summary
In OpenClaw versions before 2026.4.29, the browser debug/export routes may reuse already-open blocked private-network tabs without enforcing the expected Server-Side Request Forgery (SSRF) policy. This can lead to unauthorized export or inspection of content that should be protected by browser network policies. The vulnerability is scoped to the named feature and configuration and does not affect the overall trusted-operator model. The first stable patched version addressing this issue is 2026.4.29.
Potential Impact
If the affected feature is enabled and accessible, an attacker able to reference an already-open browser tab could bypass network policy restrictions and access or export content from tabs that should remain protected. The actual impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. The vulnerability has a moderate severity rating and does not affect availability.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.4.29. Until upgrading, operators should close blocked tabs before using the debug/export features and restrict access to browser debug routes. Additionally, it is recommended to keep channel and tool allowlists narrow, avoid sharing a Gateway instance between mutually untrusted users, and disable the affected feature when not needed.
GHSA-hcm3-8f6r-6xwg: OpenClaw: Browser debug/export routes could reuse already-open blocked tabs
Description
OpenClaw versions prior to 2026.4.29 have a vulnerability in browser debug/export routes where already-open blocked tabs could be reused without reapplying the expected SSRF policy. This allows an attacker with access to these routes to potentially export or inspect content from tabs that should be protected by browser network policies. The vulnerability affects the specific feature and configuration related to browser debug/export routes and does not alter the trusted-operator model of OpenClaw. The issue is mitigated by closing blocked tabs before using debug/export features and restricting access to these routes until patched.
CVSS v3.1
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
In OpenClaw versions before 2026.4.29, the browser debug/export routes may reuse already-open blocked private-network tabs without enforcing the expected Server-Side Request Forgery (SSRF) policy. This can lead to unauthorized export or inspection of content that should be protected by browser network policies. The vulnerability is scoped to the named feature and configuration and does not affect the overall trusted-operator model. The first stable patched version addressing this issue is 2026.4.29.
Potential Impact
If the affected feature is enabled and accessible, an attacker able to reference an already-open browser tab could bypass network policy restrictions and access or export content from tabs that should remain protected. The actual impact depends on the operator's configuration and whether untrusted input can reach the vulnerable code path. The vulnerability has a moderate severity rating and does not affect availability.
Mitigation Recommendations
A fix is available in OpenClaw version 2026.4.29. Until upgrading, operators should close blocked tabs before using the debug/export features and restrict access to browser debug routes. Additionally, it is recommended to keep channel and tool allowlists narrow, avoid sharing a Gateway instance between mutually untrusted users, and disable the affected feature when not needed.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hcm3-8f6r-6xwg
- Osv Schema Version
- 1.4.0
- Aliases
- []
- Ecosystems
- ["npm"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a46ecca27e9c7971943ee4f
Added to database: 07/02/2026, 22:57:14 UTC
Last enriched: 07/02/2026, 23:20:09 UTC
Last updated: 07/02/2026, 23:20:09 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.