N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-mr32-vwc2-5j6h

GHSA-mr32-vwc2-5j6h: OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access

Summary

In affected versions, the Browser Relay /cdp WebSocket endpoint did not require an authentication token. As a result, a website running in the browser could potentially connect to the local relay (via loopback WebSocket) and use CDP to access cookies from other open tabs and run JavaScript in the context of other tabs.

Affected Packages / Versions

npm: openclaw >= 2026.1.20, < 2026.2.1
npm: moltbot <= 0.1.0

Details

The Chrome extension Browser Relay service exposes a local WebSocket endpoint at ws://127.0.0.1:18792/cdp (default port) for forwarding Chrome DevTools Protocol (CDP) messages.

In affected versions, the /cdp upgrade path verified the TCP peer was loopback but did not require a shared secret and did not block browser-initiated cross-origin requests.

Impact

Potential disclosure of sensitive information (for example, session cookies from other open tabs)
Potential JavaScript execution in the context of other open tabs

Users must have the Browser Relay extension installed and active, and must visit an untrusted site.

Fix

openclaw now requires a per-instance shared secret header for Browser Relay access:

HTTP header: x-openclaw-relay-token

It also rejects /cdp WebSocket upgrades when the Origin header is present but is not chrome-extension://..., and refuses /cdp connections unless the extension is connected.

Fix Commit(s)

a1e89afcc19efd641c02b24d66d689f181ae2b5c

Releases

openclaw@2026.2.1 includes the fix.
Latest published openclaw at time of writing: 2026.2.13.

Mitigation

Update to openclaw@>= 2026.2.1.
If you cannot update immediately, disable the Browser Relay extension / relay server and avoid visiting untrusted sites.

Thanks @johnatzeropath, @LeftenantZero, and @yueyueL for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-mr32-vwc2-5j6h

GHSA-mr32-vwc2-5j6h:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	>= 2026.1.20, < 2026.2.1	2026.2.1
moltbot	npm	<= 0.1.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the openclaw browser relay service, which exposes a local WebSocket endpoint for the Chrome DevTools Protocol (CDP). The core of the issue lies within the ensureChromeExtensionRelayServer function in src/browser/extension-relay.ts. This function sets up an HTTP server and a WebSocket upgrade handler.

Analysis of the patch a1e89afcc19efd641c02b24d66d689f181ae2b5c reveals that two key security checks were missing in the vulnerable versions:

Missing Authentication Token: The WebSocket upgrade handler for the /cdp path did not require an authentication token. A malicious website could initiate a WebSocket connection to ws://127.0.0.1:18792/cdp without providing any credentials.
Missing Origin Check: The server did not validate the Origin header of incoming WebSocket upgrade requests. This allowed cross-origin connections from any website, defeating the browser's same-origin policy for WebSockets.

The patch rectifies these issues by:

Generating a per-instance relayAuthToken.
Requiring this token to be passed in the x-openclaw-relay-token header for all /cdp and /json requests.
Rejecting any WebSocket upgrade request where the Origin header is present but is not from the legitimate chrome-extension://.

By failing to implement these checks, the ensureChromeExtensionRelayServer function created a server that was open to abuse by any website visited by the user, allowing attackers to access sensitive data and execute code in the context of other open tabs.

Vulnerable functions

ensureChromeExtensionRelayServer

src/browser/extension-relay.ts

This function is responsible for creating and configuring the Chrome Extension Relay server. The vulnerability lies in the fact that, prior to the patch, the WebSocket upgrade handler for the `/cdp` path and the HTTP handler for `/json` paths did not perform any authentication or origin validation. The code snippet from the patch shows the addition of a token-based authentication check for the `/cdp` endpoint. The absence of this check in the vulnerable version allowed any process on the local machine, including a malicious website running in the browser, to connect to the WebSocket and gain access to the Chrome DevTools Protocol, leading to information disclosure and remote code execution within other browser tabs.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-mr32-vwc2-5j6h: OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access

Summary

Affected Packages / Versions

Details

Impact

Fix

Fix Commit(s)

Releases

Mitigation

GHSA-mr32-vwc2-5j6h:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

GHSA-mr32-vwc2-5j6h: OpenClaw's Browser Relay /cdp websocket is missing auth which could allow cross-tab cookie access

Summary

Affected Packages / Versions

Details

Impact

Fix

Fix Commit(s)

Releases

Mitigation

Basic Information

Basic Information

Technical Details

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI