CVE-2026-32008

HIGH EPSS 32.2%
Published Mar 19, 20263mo ago · Modified Mar 23, 20263mo ago
7.1 CVSS 4.0
High
Find Similar
Published Mar 19, 2026 3mo ago
Last Modified Mar 23, 2026 3mo ago

Description

OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authenticated users with browser-tool access to navigate to file:// URLs. Attackers can exploit this by accessing local files readable by the OpenClaw process user through browser snapshot and extraction actions to exfiltrate sensitive data.

CVSS Details

Base Score
7.1
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
32.2% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-610

Affected Products 1

VendorProductVersionRange
openclawopenclaw* <2026.2.21

References 3

  • github.com https://github.com/openclaw/openclaw/commit/220bd95eff6838234e8b4b711f86d4565e16e401
    Patch
  • github.com https://github.com/openclaw/openclaw/security/advisories/GHSA-45cg-2683-gfmq
    ExploitMitigationVendor Advisory
  • vulncheck.com https://www.vulncheck.com/advisories/openclaw-arbitrary-local-file-read-via-browser-navigation-guard
    Third Party Advisory

Remediation

  • github.com https://github.com/openclaw/openclaw/commit/220bd95eff6838234e8b4b711f86d4565e16e401
    Patch