OpenClaw versions up to 2026.4.1 contain a vulnerability where the node.invoke(browser.proxy) function bypasses the browser.request persistent profile-mutation guard, allowing mutation of persistent browser profiles. This issue affects the OpenClaw local assistant under its trust model and does not assume multi-tenant service boundaries. The vulnerability has been fixed in version 2026.4.8.