Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7g8c-r2vm-433h

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1
CVSS3: 8.5

Описание

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.

EPSS

Процентиль: 15%
0.00241
Низкий

5.1 Medium

CVSS4

8.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 8.5
nvd
29 дней назад

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks.

EPSS

Процентиль: 15%
0.00241
Низкий

5.1 Medium

CVSS4

8.5 High

CVSS3

Дефекты

CWE-918