Openclaw CVE-2026-32972

Requires authenticated access to OpenClaw before version 2026.3.11 with operator.write permission. Attacker exploits browser.request endpoint to access admin-only browser profile management routes, creating or modifying profiles and persisting attacker-controlled CDP endpoints. No admin privileges required; no user interaction needed.

Real-world risk is elevated for organizations using OpenClaw in multi-tenant or shared automation environments. The CVSS 4.0 vector (AV:N/AC:L/PR:L/VI:H) indicates network-accessible exploitation with low complexity requiring only standard user credentials, resulting in high integrity impact to vulnerable systems. While no public exploit identified at time of analysis, the authentication bypass pattern is straightforward to exploit once an attacker obtains operator.write credentials through phishing, credential stuffing, or insider threat scenarios. SSVC framework considerations: exploitation status is unconfirmed publicly, but technical impact is significant (attacker gains admin-level control over browser profiles), and the vulnerability appears automatable once initial access is obtained. The absence of EPSS data prevents quantitative exploitation probability assessment, but the combination of network attack vector, low complexity, and published vendor advisory increases likelihood of opportunistic scanning. This represents a genuine authorization boundary violation rather than inflated-CVSS-low-real-risk scenario, particularly for organizations where browser profiles control access to sensitive web applications or scraping targets.

An attacker with compromised operator.write credentials (obtained through credential theft or malicious insider) authenticates to the OpenClaw management interface and sends browser.request API calls to administrative browser profile routes. Despite lacking operator.admin privileges, the authorization bypass allows the attacker to create a new browser profile configured with a remote CDP endpoint pointing to attacker-controlled infrastructure (e.g., ws://malicious-cdp-server.example.com:9222). When legitimate automation jobs execute using this poisoned profile, browser debugging sessions connect to the attacker's CDP server, enabling real-time interception of authentication tokens, form data, or injection of malicious JavaScript into target web applications. The attacker persists this configuration to disk, ensuring persistent access across OpenClaw restarts without requiring ongoing operator.write access.