p PatchFirst

PatchFirst · Latest vulnerabilities

openclaw 2026.6.5: known vulnerabilities

Known vulnerability affecting openclaw 2026.6.5: 1. Compare the fixes below with your installed release.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2026-62197

    Medium · CVSS 6.3EPSS 0.33%Fix available

    OpenClaw < 2026.6.6 Policy Bypass via CDP Discovery

    OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network destinations that should have been blocked by OpenClaw policy when the affected feature is enabled.

    openclawNode.js
    • Update to 2026.6.6
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →