OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs
A vulnerability in OpenClaw browser CDP discovery allows blocked WebSocket URLs to be accepted, potentially enabling lower-trust callers to reach restricted network destinations contrary to configured policy.