Browser access since update

[supple crystal]

After updating to 2026.4.21, openclaw can't access the browser tool from Telegram. Sandbox mode is off, allowHostControl is true, chrome profile is connected via CDP on port 9222. What am I missing?

I am on a Mac mini

[wicked ivy]

To help others find answers, you can mark your question as solved via Right click solution message -> Apps -> ✅ Mark Solution

[lethal haven]

First, can you paste openclaw --version?

If sandbox is really off, allowHostControl is probably not the missing piece. That setting only matters for sandboxed sessions.

What I’d check first after this update:

1. Browser plugin got excluded
   If you use plugins.allow, make sure it includes "browser", not just "telegram".

2. Tool policy blocks it
   If you use tools.allow, make sure "browser" is in there too. tools.allow still applies even when sandboxing is off.

3. Local CDP attach is being SSRF-blocked
   If the tool exists but cannot attach, use:

   • attachOnly: true
   • cdpUrl: "http://127.0.0.1:9222"
   • if you have a restrictive browser.ssrfPolicy, allow both 127.0.0.1 and localhost in both allowedHostnames and hostnameAllowlist

Quick checks:

openclaw --version
openclaw browser status
openclaw browser profiles
openclaw status --all

Useful docs:

• https://docs.openclaw.ai/tools/browser
• https://docs.openclaw.ai/gateway/troubleshooting
• https://docs.openclaw.ai/gateway/configuration-reference
• https://docs.openclaw.ai/gateway/sandboxing

If you paste:

• openclaw --version