CVE-2026-26317

HIGH EPSS 3.7%
Published Feb 19, 20264mo ago · Modified Feb 26, 20264mo ago
7.1 CVSS 3.1
High
Find Similar
Published Feb 19, 2026 4mo ago
Last Modified Feb 26, 2026 4mo ago

Description

OpenClaw is a personal AI assistant. Prior to 2026.2.14, browser-facing localhost mutation routes accepted cross-origin browser requests without explicit Origin/Referer validation. Loopback binding reduces remote exposure but does not prevent browser-initiated requests from malicious origins. A malicious website can trigger unauthorized state changes against a victim's local OpenClaw browser control plane (for example opening tabs, starting/stopping the browser, mutating storage/cookies) if the browser control service is reachable on loopback in the victim's browser context. Starting in version 2026.2.14, mutating HTTP methods (POST/PUT/PATCH/DELETE) are rejected when the request indicates a non-loopback Origin/Referer (or `Sec-Fetch-Site: cross-site`). Other mitigations include enabling browser control auth (token/password) and avoid running with auth disabled.

CVSS Details

Base Score
7.1
Exploitability
2.8
Impact
4.2
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction Required
Scope Unchanged
Confidentiality None
Integrity High
Availability Low

Threat Intelligence

EPSS Exploit Probability
3.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-352 Cross-Site Request Forgery (CSRF) Authentication

Affected Products 1

VendorProductVersionRange
openclawopenclaw* <2026.2.14

References 3

  • github.com https://github.com/openclaw/openclaw/commit/b566b09f81e2b704bf9398d8d97d5f7a90aa94c3
    Patch
  • github.com https://github.com/openclaw/openclaw/releases/tag/v2026.2.14
    Release Notes
  • github.com https://github.com/openclaw/openclaw/security/advisories/GHSA-3fqr-4cg8-h96q
    PatchVendor Advisory

Remediation

  • github.com https://github.com/openclaw/openclaw/commit/b566b09f81e2b704bf9398d8d97d5f7a90aa94c3
    Patch
  • github.com https://github.com/openclaw/openclaw/security/advisories/GHSA-3fqr-4cg8-h96q
    PatchVendor Advisory