Количество 2
Количество 2
CVE-2026-53812
OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions. Attackers can trigger navigation to private-network targets via action-triggered redirects and subsequently read restricted page content using browser evaluation capabilities.
GHSA-2hfg-4fh4-qp7f
OpenClaw's browser act interactions could bypass private-network navigation checks
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53812 OpenClaw before 2026.5.18 contains a server-side request forgery vulnerability in browser control that allows authenticated users to bypass private-network navigation checks through Playwright act interactions. Attackers can trigger navigation to private-network targets via action-triggered redirects and subsequently read restricted page content using browser evaluation capabilities. | CVSS3: 7.7 | 0% Низкий | около 2 месяцев назад |
| GHSA-2hfg-4fh4-qp7f OpenClaw's browser act interactions could bypass private-network navigation checks | CVSS3: 7.7 | 0% Низкий | около 1 месяца назад |
Уязвимостей на страницу