Skip to content
Threat Feed
Subscribe

Tag

Network-Binding

2 briefs RSS
critical advisory

OpenClaw Improper Network Binding Leads to Unauthorized CDP Access (CVE-2026-43581)

OpenClaw before 2026.4.10 contains an improper network binding vulnerability (CVE-2026-43581) that exposes the Chrome DevTools Protocol (CDP) on 0.0.0.0, allowing attackers to access the DevTools protocol outside intended local sandbox boundaries.

OpenClaw cve network-binding sandbox-escape
2r 1t 1c
critical advisory

NornicDB Improper Network Binding Exposes Bolt Server

NornicDB versions prior to 1.0.42-hotfix have an improper network binding vulnerability in its Bolt server, allowing unauthorized remote access because the `--address` CLI flag is not correctly plumbed through to the Bolt server config, causing the Bolt listener to always bind to the wildcard address and expose the database with default credentials.

nornicdb network-binding misconfiguration graph-database
2r 2t