Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fc43-vcvc-5qg7

Опубликовано: 17 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.9
CVSS3: 7.7

Описание

OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers with lower-trust access can bypass OpenClaw policy checks to reach network destinations that should have been blocked.

OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers with lower-trust access can bypass OpenClaw policy checks to reach network destinations that should have been blocked.

EPSS

Процентиль: 14%
0.00229
Низкий

4.9 Medium

CVSS4

7.7 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.7
nvd
29 дней назад

OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers with lower-trust access can bypass OpenClaw policy checks to reach network destinations that should have been blocked.

EPSS

Процентиль: 14%
0.00229
Низкий

4.9 Medium

CVSS4

7.7 High

CVSS3

Дефекты

CWE-918