GHSA-525j-hqq2-66r4: OpenClaw: Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0

April 17, 2026

Sandbox browser CDP relay could expose DevTools protocol on 0.0.0.0.

References

github.com/advisories/GHSA-525j-hqq2-66r4
github.com/openclaw/openclaw/commit/fbf11ebdb7110632f93926d0ac7b48f04cb44d77
github.com/openclaw/openclaw/pull/61404
github.com/openclaw/openclaw/security/advisories/GHSA-525j-hqq2-66r4

Code Behaviors & Features

Detect and mitigate GHSA-525j-hqq2-66r4 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →