CVE-2026-100589
OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the browser tool that allows sandboxed sessions to access paired node browser actions despite allowHostControl=false configuration. Attackers with control over sandboxed agent input can select a paired node and perform host browser operations, inspecting or manipulating the connected browser profile and its authenticated state.
- Published Sep 26, 2026
- CVSS 8.7 high
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available