GitHub Advisoryadvisory · npm

GHSA-mr32-vwc2-5j6h OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access

HIGH Published 2026-02-17 Modified 2026-03-06 Official page ↗
Aliases
CVE-2026-28458
Ecosystem
npm
Packages
openclaw, moltbot
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-306
Reviewed
2026-02-17

Affected packages

• npm openclaw: >= 2026.1.20, < 2026.2.1 → fixed in 2026.2.1 • npm moltbot: <= 0.1.0 (no fix yet)

Description

Summary In affected versions, the Browser Relay `/cdp` WebSocket endpoint did not require an authentication token. As a result, a website running in the browser could potentially connect to the local relay (via loopback WebSocket) and use CDP to access cookies from other open tabs and run JavaScript in the context of other tabs. Affected Packages / Versions • npm: `openclaw` `>= 2026.1.20, = 2026.2.1`. • If you cannot update immediately, disable the Browser Relay extension / relay server and avoid visiting untrusted sites. Thanks @johnatzeropath, @LeftenantZero, and @yueyueL for reporting.

Related

Alias · CVE (1)

  • CVE-2026-28458 OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp… vulnerability

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References