Authentication Bypass

OpenClaw Authentication Bypass Exposes Browser Sessions: A Coverage Red Flag for Cyber Underwriters

CVE-2026-43575 (CVSS 9.8) is an unauthenticated authentication bypass in OpenClaw noVNC helper routes that exposes browser session credentials — a coverage- and renewal-relevant risk for any cyber underwriter writing errors-and-omissions, crime, or cyber liability for environments using sandboxed browser-based access.