Threats tagged 'ghsa-2pcx-9jr9-59mg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.3%	CVE-2026-100589OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration High8.3EPSS 0.3%2026-09-26GCVE DatabaseCVE-2026-100589 OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform host browser operations, inspecting or manipulating the connected browser profile and its authenticated state. EPSS 0.3%Vulnerability CWE-863 #ghsa-2pcx-9jr9-59mg	GCVE Database	2026-09-26

Page 1 of 1