OpenClaw before 2026.4.29 is vulnerable to an SSRF policy bypass that exploits the browser debug and export routes. Attackers who can reach these routes may reuse tabs that the system has previously blocked from accessing private network resources, allowing them to query or export data that should remain protected. This flaw is mapped to CWE-863 and carries a CVSS score of 5.9, indicating moderate severity.

The vulnerability affects all OpenClaw installations running a version earlier than 2026.4.29. No specific operating system or node.js version restrictions are listed in the advisories, but the impact applies to any environment in which the affected OpenClaw product is deployed.

The exploit requires an attacker to have access to the browser debug or export routes; the vulnerability is not remotely exploitable without such access. Because the EPSS score is not available and the vulnerability is not listed in CISA KEV, the likelihood of a large‑scale exploitation campaign is uncertain. Nevertheless, systems that expose the debug routes to untrusted users face a real risk of bypassing internal SSRF restrictions and potentially exfiltrating sensitive data.