CVE-2026-100589 | OpenClaw up to 2026.7.0 Browser Tool allowHostControl privileges management

September 26, 2026 Yanac

A vulnerability was found in OpenClaw up to 2026.7.0. It has been classified as critical. This affects an unknown function of the component Browser Tool. Performing a manipulation of the argument allowHostControl results in improper privilege management.

This vulnerability was named CVE-2026-100589. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More