CVE-2026-28458
OpenClaw 2026.1.20 < 2026.2.1 - Missing Authentication in Browser Relay /cdp WebSocket Endpoint
OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not require authentication tokens, allowing websites to connect via loopback and access sensitive data. Attackers can exploit this by connecting to ws://127.0.0.1:18792/cdp to steal session cookies and execute JavaScript in other browser tabs.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Active
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
OpenClaw 2026.1.20 < 2026.2.1 - Missing Authentication in Browser Relay /cdp WebSocket Endpoint
OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not require authentication tokens, allowing websites to connect via loopback and access sensitive data. Attackers can exploit this by connecting to ws://127.0.0.1:18792/cdp to steal session cookies and execute JavaScript in other browser tabs.
- Record
CVE-2026-28458- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2026-9906
OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not require authentication tokens, allowing websites to connect via loopback and access sensitive data. Attackers can exploit this by connecting to ws://127.0.0.1:18792/cdp to steal session cookies and execute JavaScript in other browser tabs.
- Record
EUVD-2026-9906- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mr32-vwc2-5j6h
OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access
Summary
In affected versions, the Browser Relay /cdp WebSocket endpoint did not require an authentication token. As a result, a website running in the browser could potentially connect to the local relay (via loopback WebSocket) and use CDP to access cookies from other open tabs and run JavaScript in the context of other tabs.
Affected Packages / Versions
- npm:
openclaw>= 2026.1.20, < 2026.2.1 - npm:
moltbot<= 0.1.0
Details
The Chrome extension Browser Relay service exposes a local WebSocket endpoint at ws://127.0.0.1:18792/cdp (default port) for forwarding Chrome DevTools Protocol (CDP) messages.
In affected versions, the /cdp upgrade path verified the TCP peer was loopback but did not require a shared secret and did not block browser-initiated cross-origin requests.
Impact
- Potential disclosure of sensitive information (for example, session cookies from other open tabs)
- Potential JavaScript execution in the context of other open tabs
Users must have the Browser Relay extension installed and active, and must visit an untrusted site.
Fix
openclaw now requires a per-instance shared secret header for Browser Relay access:
- HTTP header:
x-openclaw-relay-token
It also rejects /cdp WebSocket upgrades when the Origin header is present but is not chrome-extension://..., and refuses /cdp connections unless the extension is connected.
Fix Commit(s)
a1e89afcc19efd641c02b24d66d689f181ae2b5c
Releases
openclaw@2026.2.1includes the fix.- Latest published
openclawat time of writing:2026.2.13.
Mitigation
- Update to
openclaw@>= 2026.2.1. - If you cannot update immediately, disable the Browser Relay extension / relay server and avoid visiting untrusted sites.
Thanks @johnatzeropath, @LeftenantZero, and @yueyueL for reporting.
- Record
GHSA-mr32-vwc2-5j6h- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not require authentication tokens, allowing websites to connect via loopback and access sensitive data. Attackers can exploit this by connecting to ws://127.0.0.1:18792/cdp to steal session cookies and execute JavaScript in other browser tabs.
- Record
CVE-2026-28458- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 8.1 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N - CVSS 3.1
- 5.4 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
OSV
OpenClaw 2026.1.20 < 2026.2.1 - Missing Authentication in Browser Relay /cdp WebSocket Endpoint
OpenClaw version 2026.1.20 prior to 2026.2.1 contains a vulnerability in the Browser Relay (extension must be installed and enabled) /cdp WebSocket endpoint in which it does not require authentication tokens, allowing websites to connect via loopback and access sensitive data. Attackers can exploit this by connecting to ws://127.0.0.1:18792/cdp to steal session cookies and execute JavaScript in other browser tabs.
- Record
CVE-2026-28458- CVSS 4.0
- 7.4 High
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N - Weakness
- CWE-306
- Updated
- 2026-11-02
OSVGHSA-mr32-vwc2-5j6h
OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access
Summary
In affected versions, the Browser Relay /cdp WebSocket endpoint did not require an authentication token. As a result, a website running in the browser could potentially connect to the local relay (via loopback WebSocket) and use CDP to access cookies from other open tabs and run JavaScript in the context of other tabs.
Affected Packages / Versions
- npm:
openclaw>= 2026.1.20, < 2026.2.1 - npm:
moltbot<= 0.1.0
Details
The Chrome extension Browser Relay service exposes a local WebSocket endpoint at ws://127.0.0.1:18792/cdp (default port) for forwarding Chrome DevTools Protocol (CDP) messages.
In affected versions, the /cdp upgrade path verified the TCP peer was loopback but did not require a shared secret and did not block browser-initiated cross-origin requests.
Impact
- Potential disclosure of sensitive information (for example, session cookies from other open tabs)
- Potential JavaScript execution in the context of other open tabs
Users must have the Browser Relay extension installed and active, and must visit an untrusted site.
Fix
openclaw now requires a per-instance shared secret header for Browser Relay access:
- HTTP header:
x-openclaw-relay-token
It also rejects /cdp WebSocket upgrades when the Origin header is present but is not chrome-extension://..., and refuses /cdp connections unless the extension is connected.
Fix Commit(s)
a1e89afcc19efd641c02b24d66d689f181ae2b5c
Releases
openclaw@2026.2.1includes the fix.- Latest published
openclawat time of writing:2026.2.13.
Mitigation
- Update to
openclaw@>= 2026.2.1. - If you cannot update immediately, disable the Browser Relay extension / relay server and avoid visiting untrusted sites.
Thanks @johnatzeropath, @LeftenantZero, and @yueyueL for reporting.
- Record
GHSA-mr32-vwc2-5j6h- CVSS 4.0
- 7.1 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-28458 is a high vulnerability (CVSS 7.4) in Openclaw, published February 17, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. Fixed in openclaw 2026.2.1.
References
github.com/openclaw/openclaw/security/advisories/GHSA-mr32-vwc2-5j6h
vulncheck.com/advisories/openclaw-missing-authentication-in-browser-relay-cdp-websocket-endpoint
nvd.nist.gov/vuln/detail/CVE-2026-28458