OpenClaw versions before 2026.4.10 contain an improper network binding vulnerability in the sandbox browser CDP relay. The vulnerability exposes Chrome DevTools Protocol on 0.0.0.0, allowing attackers to access the DevTools protocol outside the intended local sandbox boundaries. This occurs due to an overly broad binding configuration in the CDP relay component. The vulnerability enables remote attackers to bypass sandbox security controls and potentially execute unauthorized actions through the exposed DevTools interface.