LiveActive security incident?Get immediate response
CVE Record

CVE-2026-28395: OpenClaw 2026.1.14-1 < 2026.2.12 - Unintended Public Binding of Chrome Extension Relay via Wildcard cdpUrl

OpenClaw version 2026.1.14-1 prior to 2026.2.12 contains an improper network binding vulnerability in the Chrome extension (must be installed and enabled) relay server that treats wildcard hosts as loopback addresses, allowing the relay HTTP/WS server to bind to all interfaces when a wildcard cdpUrl is configured. Remote attackers can access relay HTTP endpoints off-host to leak service presence and port information, or conduct denial-of-service and brute-force attacks against the relay token header.

MediumCVSS 6.5Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

OpenClaw could accidentally expose a local Chrome extension relay to the network when configured with a wildcard cdpUrl. That can reveal that the service exists, expose port information, and allow availability pressure against the relay. The issue matters most for systems running the affected version with the extension enabled and wildcard configuration present.

Executive priority

Treat as a targeted configuration-dependent exposure, not a broad critical emergency. Prioritize internet-facing or shared-network OpenClaw systems first, especially where the Chrome extension is enabled. Upgrade and configuration review should be scheduled promptly through normal vulnerability management.

Technical view

CVE-2026-28395 is an improper network binding issue in OpenClaw 2026.1.14-1 before 2026.2.12. The relay treats wildcard hosts as loopback, causing HTTP/WS relay binding on all interfaces. The reported impact is low confidentiality exposure and low availability impact, with no integrity impact in the supplied CVSS vector.

Likely exposure

Exposure appears conditional: OpenClaw must be affected, the Chrome extension must be installed and enabled, and a wildcard cdpUrl must be configured. Public exposure is more likely on hosts without local firewall or network segmentation limiting relay access.

Exploitation context

The source bundle does not show CISA KEV listing or active exploitation evidence. The described attacker capability is remote access to unintended relay HTTP endpoints, service and port information leakage, denial-of-service pressure, and brute-force attempts against the relay token header.

Researcher notes

The key condition is wildcard cdpUrl handling in the Chrome extension relay. Validate binding behavior and reachable interfaces without publishing exploit procedure. Evidence supports affected OpenClaw 2026.1.14-1 and fixed versions starting 2026.2.12; broader affected ranges are not established in the bundle.

Mitigation direction

  • Upgrade OpenClaw to 2026.2.12 or later per vendor advisory.
  • Remove wildcard cdpUrl settings where they are not explicitly required.
  • Restrict relay access to loopback or trusted management networks.
  • Use host firewall controls to block unintended off-host relay access.
  • Review vendor advisory and patch commits before approving exceptions.

Validation and detection

  • Inventory OpenClaw deployments and confirm exact running versions.
  • Check whether the Chrome extension is installed and enabled.
  • Review cdpUrl configuration for wildcard host values.
  • Confirm relay HTTP/WS listeners are not reachable off-host.
  • Review network logs for unexpected relay access attempts.
Prepared
Confidence
high
Sources
6

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cwe · low confidence lookup

CWE-1327: Exact CWE lookup

Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.

Open ATT&CK lookup
description · low confidence lookup

Credential and access behavior lookup

The CVE wording references authentication or credential exposure, so valid-account and credential-access review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2026-28395 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Medium
CVSS
6.5 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

2CVSS vectors
3Timeline events
1ADP providers
5Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: yesTechnical Impact: partial

CVSS vector scores

2 official scores

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
6.5CVSS 3.1MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L3.92.5VulnCheck
6.3CVSS 4.0MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N——VulnCheck

Vulnerability scoring details

Base CVSS 4.0 score

6.3Medium
CVSS 4.0 vector shape for CVE-2026-28395Attack VectorAttack ComplexityAttack RequirementsPrivileges RequiredUser InteractionVS ConfidentialityVS IntegrityVS AvailabilitySS ConfidentialitySS IntegritySS Availability

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Attack Requirements
NonePresent
Privileges Required
NoneLowHigh
User Interaction
NonePassiveActive
VS Confidentiality
HighLowNone
VS Integrity
HighLowNone
VS Availability
HighLowNone
SS Confidentiality
HighLowNone
SS Integrity
HighLowNone
SS Availability
HighLowNone

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
OpenClawOpenClaw2026.1.14-1unaffected
Weakness

CWE details

CWE-1327

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.

CWE-1327 · source CWE mapping

Binding to an Unrestricted IP Address

Binding to an Unrestricted IP Address represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.

Open CWE intelligenceSame-CWE CVEs