Critical OpenClaw Flaw Allows Unauthenticated Remote Sandbox Access

This critical vulnerability (CVSS 9.8) completely bypasses OpenClaw's authentication, enabling remote attackers to gain interactive control over the AI platform's sandboxed browser environment. Proof-of-concept exploits are already publicly available, making immediate patching essential for affected organizations. The flaw directly undermines the security foundation of AI assistant platforms by exposing the sandbox layer designed to isolate AI operations from unauthorized access.