Openclaw cli: OpenClaw's Chrome extension relay binds publicly due to wildcard treated as loopback (CVE-2026-28395)
Description
A vulnerability in the OpenClaw CLI Chrome extension relay caused the relay HTTP/WS server to bind publicly when configured with a wildcard cdpUrl. This occurred because wildcard hosts were incorrectly treated as loopback addresses. The issue could expose relay endpoints off-host, leaking service presence and enabling denial-of-service or brute-force attacks against the relay token header. The flaw affects versions from 2026.1.14-1 up to but not including 2026.2.12 and was fixed in version 2026.2.12.
CVSS v3.1
Score 6.5medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI Chrome extension relay function ensureChromeExtensionRelayServer previously mishandled wildcard hosts (0.0.0.0 / ::) by treating them as loopback addresses. This caused the relay HTTP/WS server to bind to all network interfaces when a wildcard cdpUrl was specified, making the relay endpoints publicly reachable. This exposure could leak the presence and port of the relay service and allow denial-of-service or brute-force attacks targeting the relay token header. The vulnerability affects openclaw npm package versions >=2026.1.14-1 and <2026.2.12. The issue was patched in version 2026.2.12 with commit 8d75a496bf5aaab1755c56cf48502d967c75a1d0.
Potential Impact
If the relay is configured with a wildcard cdpUrl, the relay HTTP endpoints become accessible from external hosts, potentially leaking service presence and port information. This exposure enables attackers to perform denial-of-service or brute-force attacks against the relay token header, impacting availability and confidentiality.
Mitigation Recommendations
A patch is available and should be applied by upgrading to openclaw version 2026.2.12 or later. This update corrects the binding behavior to prevent the relay server from binding publicly when a wildcard cdpUrl is used.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-28395
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245cb12601ec6a3167f20
Added to database: 10/04/2026, 12:25:47 UTC
Last enriched: 10/04/2026, 13:11:17 UTC
Last updated: 10/04/2026, 16:08:37 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.