| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | ≥ 2026.3.28, < 2026.5.19 | 2026.5.19 |
OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free