CVE-2026-26317

OpenClaw is a personal AI assistant. Prior to 2026.2.14, browser-facing localhost mutation routes accepted cross-origin browser requests without explicit Origin/Referer validation. Loopback binding reduces remote exposure but does not prevent browser-initiated requests from malicious origins. A malicious website can trigger unauthorized state changes against a victim's local OpenClaw browser control plane (for example opening tabs, starting/stopping the browser, mutating storage/cookies) if the browser control service is reachable on loopback in the victim's browser context. Starting in version 2026.2.14, mutating HTTP methods (POST/PUT/PATCH/DELETE) are rejected when the request indicates a non-loopback Origin/Referer (or `Sec-Fetch-Site: cross-site`). Other mitigations include enabling browser control auth (token/password) and avoid running with auth disabled.

• CWE-352

• https://github.com/openclaw/openclaw/commit/b566b09f81e2b704bf9398d8d97d5f7a90aa94c3Patch
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14Release Notes
• https://github.com/openclaw/openclaw/security/advisories/GHSA-3fqr-4cg8-h96qPatch, Vendor Advisory

Published

Feb 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-26311Envoy is a high-performance edge/middle/service proxy. Prior…5.9
• CVE-2026-26312Stalwart is a mail and collaboration server. A denial-of-ser…6.5
• CVE-2026-26313go-ethereum (geth) is a golang execution layer implementatio…7.5
• CVE-2026-26314go-ethereum (geth) is a golang execution layer implementatio…7.5
• CVE-2026-26315go-ethereum (Geth) is a golang execution layer implementatio…7.5
• CVE-2026-26316OpenClaw is a personal AI assistant. Prior to 2026.2.13, the…7.5
• CVE-2026-26318systeminformation is a System and OS information library for…8.8
• CVE-2026-26319OpenClaw is a personal AI assistant. Versions 2026.2.13 and …7.5
• CVE-2026-26320OpenClaw is a personal AI assistant. OpenClaw macOS desktop …6.5
• CVE-2026-26321OpenClaw is a personal AI assistant. Prior to OpenClaw versi…7.5
• CVE-2026-26322OpenClaw is a personal AI assistant. Prior to OpenClaw versi…7.6
• CVE-2026-26323OpenClaw is a personal AI assistant. Versions 2026.1.8 throu…8.8