OpenClaw versions prior to 2026.4.29 have a vulnerability in browser debug/export routes where already-open blocked tabs could be reused without reapplying the expected SSRF policy. This allows an attacker with access to these routes to potentially export or inspect content from tabs that should be protected by browser network policies. The vulnerability affects the specific feature and configuration related to browser debug/export routes and does not alter the trusted-operator model of OpenClaw. The issue is mitigated by closing blocked tabs before using debug/export features and restricting access to these routes until patched.