Advisory details:
github_osv / GHSA-mr32-vwc2-5j6h
| Advisory ID | github_osv/GHSA-mr32-vwc2-5j6h |
| Aliases |
CVE-2026-28458
|
| Summary | OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access ### Summary In affected versions, the Browser Relay `/cdp` WebSocket endpoint did not require an authentication token. As a result, a website running in the browser could potentially connect to the local relay (via loopback WebSocket) and use CDP to access cookies from other open tabs and run JavaScript in the context of other tabs. ### Affected Packages / Versions - npm: `openclaw` `>= 2026.1.20, < 2026.2.1` - npm: `moltbot` `<= 0.1.0` ### Details The Chrome extension Browser Relay service exposes a local WebSocket endpoint at `ws://127.0.0.1:18792/cdp` (default port) for forwarding Chrome DevTools Protocol (CDP) messages. In affected versions, the `/cdp` upgrade path verified the TCP peer was loopback but did not require a shared secret and did not block browser-initiated cross-origin requests. ### Impact - Potential disclosure of sensitive information (for example, session cookies from other open tabs) - Potential JavaScript execution in the context of other open tabs Users must have the Browser Relay extension installed and active, and must visit an untrusted site. ### Fix `openclaw` now requires a per-instance shared secret header for Browser Relay access: - HTTP header: `x-openclaw-relay-token` It also rejects `/cdp` WebSocket upgrades when the Origin header is present but is not `chrome-extension://...`, and refuses `/cdp` connections unless the extension is connected. ### Fix Commit(s) - `a1e89afcc19efd641c02b24d66d689f181ae2b5c` ### Releases - `openclaw@2026.2.1` includes the fix. - Latest published `openclaw` at time of writing: `2026.2.13`. ### Mitigation - Update to `openclaw@>= 2026.2.1`. - If you cannot update immediately, disable the Browser Relay extension / relay server and avoid visiting untrusted sites. Thanks @johnatzeropath, @LeftenantZero, and @yueyueL for reporting. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 6.8 |
| Risk | 3.4 |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| System | Score | Found at |
|---|---|---|
| cvssv3.1 | 7.5 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-mr32-vwc2-5j6h/GHSA-mr32-vwc2-5j6h.json |
| cvssv4 | 7.1 | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-mr32-vwc2-5j6h/GHSA-mr32-vwc2-5j6h.json |
| generic_textual | HIGH |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
| Attack Vector (AV) | Attack Complexity (AC) | Attack Requirements (AT) | Privileges Required (PR) | User Interaction (UI) | Vulnerable System Impact Confidentiality (VC) | Vulnerable System Impact Integrity (VI) | Vulnerable System Impact Availability (VA) | Subsequent System Impact Confidentiality (SC) | Subsequent System Impact Integrity (SI) | Subsequent System Impact Availability (SA) |
|---|---|---|---|---|---|---|---|---|---|---|
network adjacent local physical |
low high |
none present |
none low high |
none passive active |
high low none |
high low none |
high low none |
high low none |
high low none |
high low none |
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-03-09T17:11:32Z/
Decision: Track
Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/28xxx/CVE-2026-28458.json
Source Advisory: vulnrichment/CVE-2026-28458
[{'Exploitation': 'none'},
{'Automatable': 'no'},
{'Technical Impact': 'total'},
{'Mission Prevalence': 'minimal'},
{'Public Well-being Impact': 'material'},
{'Mission & Well-being': 'medium'}]