OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled.
2026年9月4日
CVE-2026-62197 [HIGH] – OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery t
📑 文章目录



