by Kastro
Paper/Archive/CVE-2026-32064

CVE-2026-32064

OpenClaw OpenClaw — OpenClaw < 2026.2.21 - Missing VNC Authentication in Sandbox Browser noVNC Observer

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
36
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 44.3.443 × 208.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing unauthenticated access to the VNC interface. Remote attackers on the host loopback interface can connect to the exposed noVNC port to observe or interact with the sandbox browser without credentials.

Affected

ProductAffectedFixed inSource
OpenClaw< 2026.2.212026.2.21CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
VulnCheck (CNA)8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
VulnCheck (CNA)7.7CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorygithub.com/openclaw/openclaw/security/advisories/GHSA-25gx-x37c-7pphpatchgithub.com/openclaw/openclaw/commit/621d8e1312482f122f18c43c72c67211b141da01patchgithub.com/openclaw/openclaw/commit/8c1518f0f3e0533593cd2dec3a46c9b746753661writeupvulncheck.com/advisories/openclaw-missing-vnc-authentication-in-sandbox-browser-novnc-observer