{"id":"EUVD-2026-43537","enisaUuid":"ee6d99fe-c1c7-3b26-b7cc-f821c89a1414","description":"OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled.","datePublished":"Jul 13, 2026, 9:30:18 PM","dateUpdated":"Jul 14, 2026, 12:58:20 PM","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery\n","aliases":"CVE-2026-62197\nGHSA-jw7v-5mp7-ghgm\nGHSA-3x84-qq85-fj65\n","assigner":"VulnCheck","epss":0.33,"enisaIdProduct":[{"id":"0a5eff7c-c4af-36c1-b922-3892ce0eab95","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.6.6"}],"enisaIdVendor":[{"id":"47b737d4-d9d1-3968-b148-54e8ae9da6e3","vendor":{"name":"OpenClaw"}}],"enisaIdVulnerability":[{"id":"b3f74a21-45d0-389c-9b7d-1747df6f81fb","vulnerability":{"id":"GHSA-jw7v-5mp7-ghgm","description":"Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs","datePublished":"Jul 14, 2026, 12:31:04 AM","dateUpdated":"Oct 21, 2026, 7:34:50 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-62197\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery\n","enisa_id":"EUVD-2026-43537\n","aliases":"GHSA-jw7v-5mp7-ghgm\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ce4cca24-9410-3ac0-9b4b-232a534103f1","vulnerability":{"id":"CVE-2026-62197","description":"OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled.","datePublished":"Jul 13, 2026, 9:30:18 PM","dateUpdated":"Jul 14, 2026, 12:58:20 PM","status":"PUBLISHED","baseScore":6.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:L/SA:N","references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery\n","enisa_id":"EUVD-2026-43537\n","assigner":"VulnCheck","epss":0.33,"dataProcessed":"Oct 30, 2026, 7:14:57 AM","vulnerabilityProduct":[{"id":"5dbf3def-3b90-3d4b-8549-85b08667250d","product":{"name":"OpenClaw","vendor":{"name":"n/a"}},"product_version":"0 \u003c2026.6.6"}],"vulnerabilityVendor":[{"id":"73ac8dc1-e345-3597-8771-89ea7bcad1d1","vendor":{"name":"OpenClaw"}}]}},{"id":"e4c4a161-0329-3520-8104-95edef5159a6","vulnerability":{"id":"GHSA-3x84-qq85-fj65","description":"OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs","datePublished":"Oct 21, 2026, 7:37:42 PM","dateUpdated":"Oct 21, 2026, 7:37:42 PM","baseScore":0.0,"references":"https://github.com/openclaw/openclaw/security/advisories/GHSA-3x84-qq85-fj65\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-62197\nhttps://github.com/openclaw/openclaw\nhttps://www.vulncheck.com/advisories/openclaw-policy-bypass-via-cdp-discovery\n","enisa_id":"EUVD-2026-43537\n","aliases":"CVE-2026-62197\nGHSA-3x84-qq85-fj65\n","epss":0.0,"dataProcessed":"Oct 30, 2026, 7:03:32 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[{"id":"9777062f-eb61-37cb-be0a-1f93769ae020","advisory":{"id":"WID-SEC-W-2026-2133","description":"OpenClaw: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in OpenClaw ausnutzen, um erweiterte Rechte zu erlangen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder andere, nicht näher spezifizierte Angriffe durchzuführen.","datePublished":"Jun 29, 2026, 10:00:00 PM","dateUpdated":"Jul 16, 2026, 10:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2133.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-2133\n","aliases":"CVE-2026-59261\nCVE-2026-62186\nCVE-2026-62187\nCVE-2026-62188\nCVE-2026-62189\nCVE-2026-62190\nCVE-2026-62191\nCVE-2026-62192\nCVE-2026-62193\nCVE-2026-62194\nCVE-2026-62195\nCVE-2026-62196\nCVE-2026-62197\nCVE-2026-62198\nCVE-2026-62199\nCVE-2026-62200\nCVE-2026-62201\nCVE-2026-62202\nCVE-2026-62203\nCVE-2026-62205\nCVE-2026-62206\nCVE-2026-62207\nCVE-2026-62208\nCVE-2026-62209\nCVE-2026-62210\nCVE-2026-62211\nCVE-2026-62212\nCVE-2026-62213\nCVE-2026-62214\nCVE-2026-62215\nCVE-2026-62216\nCVE-2026-62217\nCVE-2026-62218\nCVE-2026-62219\nCVE-2026-62220\nCVE-2026-62221\nCVE-2026-62222\nCVE-2026-62224\nCVE-2026-62225\nCVE-2026-62226\nCVE-2026-62227\nCVE-2026-62228\nCVE-2026-62229\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"46d4e695-5b92-30e0-b593-351feb0c98dd","product":{"name":"OpenClaw","vendor":{"name":"n/a"}}},{"id":"a1f598c0-194f-34f4-8a0c-13d741c3c805","product":{"name":"2026.6.10","vendor":{"name":"open source"}}}]}}]}