https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 00:45:43 +0000 https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-28468 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Summary</p> <p>openclaw could start the sandbox browser bridge server without authentication.</p> <p>When the sandboxed browser is enabled, openclaw runs a local (loopback) HTTP bridge that exposes browser control endpoints (for example `/profiles`, `/tabs`, `/tabs/open`, `/agent/*`). Due to missing auth wiring in the sandbox initialization path, that bridge server accepted requests without requiring gateway auth.</p> <p>## Impact</p> <p>A local attacker (any process on the same machine) could access the bridge server port and:</p> <p>- enumerate open tabs and retrieve CDP WebSocket URLs - open/close/navigate tabs - execute JavaScript in page contexts via CDP - exfiltrate cookies/session data and page contents from authenticated sessions</p> <p>This is a localhost-only exposure (CVSS AV:L), but provides full browser-session compromise for sandboxed browser usage.</p> <p>## Affected Versions</p> <p>- Introduced in: `2026.1.29-beta.1` (first npm release that shipped the sandbox browser bridge) - Affected range: `&gt;=2026.1.29-beta.1 &lt;2026.2.14`</p> <p>## Patched Versions</p> <p>- `2026.2.14`</p> <p>## Mitigation</p> <p>- Upgrade to `2026.2.14` (recommended). - Or disable the sandboxed browser (`agents.defaults.sandbox.browser.enabled=false`).</p> <p>## Fix Details</p> <p>- The sandbox browser bridge server now always requires auth and enforces the same gateway browser control auth (token/password) that loopback browser clients already use. - Additional hardening: bridge server refuses non-loopback binds; local helper servers are bound to loopback. - Added re…</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>## Summary</p> <p>openclaw could start the sandbox browser bridge server without authentication.</p> <p>When the sandboxed browser is enabled, openclaw runs a local (loopback) HTTP bridge that exposes browser control endpoints (for example `/profiles`, `/tabs`, `/tabs/open`, `/agent/*`). Due to missing auth wiring in the sandbox initialization path, that bridge server accepted requests without requiring gateway auth.</p> <p>## Impact</p> <p>A local attacker (any process on the same machine) could access the bridge server port and:</p> <p>- enumerate open tabs and retrieve CDP WebSocket URLs - open/close/navigate tabs - execute JavaScript in page contexts via CDP - exfiltrate cookies/session data and page contents from authenticated sessions</p> <p>This is a localhost-only exposure (CVSS AV:L), but provides full browser-session compromise for sandboxed browser usage.</p> <p>## Affected Versions</p> <p>- Introduced in: `2026.1.29-beta.1` (first npm release that shipped the sandbox browser bridge) - Affected range: `&gt;=2026.1.29-beta.1 &lt;2026.2.14`</p> <p>## Patched Versions</p> <p>- `2026.2.14`</p> <p>## Mitigation</p> <p>- Upgrade to `2026.2.14` (recommended). - Or disable the sandboxed browser (`agents.defaults.sandbox.browser.enabled=false`).</p> <p>## Fix Details</p> <p>- The sandbox browser bridge server now always requires auth and enforces the same gateway browser control auth (token/password) that loopback browser clients already use. - Additional hardening: bridge server refuses non-loopback binds; local helper servers are bound to loopback. - Added re…</p> https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-28468 https://db.gcve.eu/vuln/cve-2026-28468 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve WebSocket URLs, execute JavaScript, and exfiltrate cookies and session data from authenticated browser contexts.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions 2026.1.29-beta.1 prior to 2026.2.14 contain a vulnerability in the sandbox browser bridge server in which it accepts requests without requiring gateway authentication, allowing local attackers to access browser control endpoints. A local attacker can enumerate tabs, retrieve WebSocket URLs, execute JavaScript, and exfiltrate cookies and session data from authenticated browser contexts.</p> https://db.gcve.eu/vuln/cve-2026-28468