CVE-2026-43581

critical · 9

OpenClaw before 2026.4.10 contains an improper network binding vulnerability in the sandbox browser CDP relay that exposes Chrome DevTools Protocol on 0.0.0.0. Attackers can access the DevTools protocol outside intended local sandbox boundaries by exploiting the overly broad binding configuration.

CVSS

0.2%

EPSS (exploit prob.)

12th

EPSS percentile

2026-05-06

Published

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-1188

Affected products

Vendor	Product	Affected versions
openclaw	openclaw	< 2026.4.10

Check a specific version with /api/v1/cve/match.

References

https://github.com/openclaw/openclaw/commit/fbf11ebdb7110632f93926d0ac7b48f04cb44d77
https://github.com/openclaw/openclaw/security/advisories/GHSA-525j-hqq2-66r4
https://www.vulncheck.com/advisories/openclaw-chrome-devtools-protocol-exposure-via-overly-broad-cdp-relay-binding

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-43581