CVE-2026-43580

MEDIUM EPSS 17.7%

Published May 6, 20261mo ago · Modified Jun 17, 20261w ago

4.9 CVSS 4.0

Medium

Published May 6, 2026 1mo ago

Last Modified Jun 17, 2026 1w ago

Description

OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement. Browser press/type style interactions, including pressKey and type submit flows, can bypass post-action security checks to execute unauthorized navigation.

CVSS Details

Base Score

4.9

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

17.7% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-862 Missing Authorization Authorization

Affected Products 1

Vendor	Product	Version	Range
openclaw	openclaw	*	<2026.4.10

References 5

github.com https://github.com/openclaw/openclaw/commit/049acf23cb03e1b92f5c71cd99c6ec5f35cc56fe

Patch
github.com https://github.com/openclaw/openclaw/commit/5f5b3d733bdd791cb457f838514179e1288b10b3

Patch
github.com https://github.com/openclaw/openclaw/commit/e0b8ddc1a55185aff1cf9e0e095014d2e4f1d894

Patch
github.com https://github.com/openclaw/openclaw/security/advisories/GHSA-536q-mj95-h29h

MitigationVendor Advisory
vulncheck.com https://www.vulncheck.com/advisories/openclaw-incomplete-navigation-guard-coverage-in-browser-interactions

Third Party Advisory

Remediation

github.com https://github.com/openclaw/openclaw/commit/049acf23cb03e1b92f5c71cd99c6ec5f35cc56fe

Patch
github.com https://github.com/openclaw/openclaw/commit/5f5b3d733bdd791cb457f838514179e1288b10b3

Patch
github.com https://github.com/openclaw/openclaw/commit/e0b8ddc1a55185aff1cf9e0e095014d2e4f1d894

Patch