OpenClaw versions released before 2026.7.1 contain a flaw in the browser tool that allows sandboxed sessions to interact with paired node browser actions even when the allowHostControl setting is set to false. An attacker who can influence the sandboxed agent input can select a paired node and perform host‑side browser operations, enabling inspection or manipulation of the connected browser profile and its authenticated state. Based on the description, it is inferred that the attacker could bypass application boundaries to exfiltrate data or carry out actions under the user’s identity.

The affected product is OpenClaw (OpenClaw:OpenClaw) and all releases prior to 2026.7.1 are vulnerable. No additional version granularity is available in the source data.

The flaw carries a CVSS score of 8.7, indicating a high severity. EPSS information is not available and the vulnerability is not listed in the CISA KEV catalog. A successful exploit requires the attacker to control sandboxed agent input, which suggests a local or compromised sandbox context. Based on the description, it is inferred that if the sandboxed agent can be influenced remotely, the risk extends beyond the local machine. Given the severity and the lack of a publicly known exploit, the opportunity for exploitation is considered moderate to high for systems that have not been updated to 2026.7.1.