Openclaw cli: OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0 (CVE-2026-43581)
Description
OpenClaw CLI versions before 2026.4.10 have a vulnerability where the sandbox browser CDP relay could expose the Chrome DevTools Protocol on all network interfaces (0.0.0.0), potentially allowing unintended external access. This exposure occurs because the CDP relay binds too broadly instead of restricting access to local or sandboxed sources. The issue is fixed in version 2026.4.10 and later, which enforce source-range restrictions by default to prevent broad exposure.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI sandbox browser CDP relay in versions prior to 2026.4.10 could bind to 0.0.0.0, exposing the Chrome DevTools Protocol (CDP) beyond the intended local or sandbox source range. This broad binding could allow unauthorized access to the DevTools protocol interface. The vulnerability was addressed by enforcing CDP source-range restrictions by default and avoiding broad 0.0.0.0 exposure unless explicitly configured. The fix was implemented in commit fbf11ebdb7110632f93926d0ac7b48f04cb44d77 and merged via PR #61404. Users are advised to upgrade to version 2026.4.10 or newer to mitigate this issue.
Potential Impact
The vulnerability allows the Chrome DevTools Protocol to be accessible on all network interfaces (0.0.0.0), potentially exposing debugging and control interfaces to unauthorized external sources. This could lead to unauthorized inspection or manipulation of the sandbox browser environment. However, there are no known exploits in the wild at this time.
Mitigation Recommendations
A patch is available. Users should upgrade OpenClaw CLI to version 2026.4.10 or later, such as the latest release 2026.4.14, which includes the fix that restricts CDP relay binding to appropriate source ranges by default. No additional mitigation steps are required if the upgrade is applied.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-43581
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245d312601ec6a316801b
Added to database: 10/04/2026, 12:25:55 UTC
Last enriched: 10/04/2026, 13:17:40 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.