Junglewise Threat Intelligence

CVE-2026-43573: OpenClaw SSRF policy bypass in existing-session browser routes

CVE-2026-43573 · Severity: low · CVSS 3.1 · Published 2026-04-17

Technologies: Openclaw. Vendors: Openclaw.

Executive brief

OpenClaw is an AI automation platform used to control browsers and interact with web applications. Existing-session browser interaction routes (click, type, press, and evaluate actions) were not enforcing the same SSRF (Server-Side Request Forgery) protection checks as other navigation routes, allowing attackers to make the browser navigate to or interact with restricted targets that should have been blocked by the configured security policy.

Technical details

The vulnerability is a missing authorization/access control check (CWE-862) combined with an SSRF weakness (CWE-918). OpenClaw's existing-session browser interaction routes in extensions/browser/src/browser/routes/agent.act.ts were missing SSRF policy enforcement that was already present on guarded browser routes. An authenticated attacker could trigger browser interactions (click, type, press, hover, scrollIntoView, drag, select, fill, evaluate, and similar actions) that result in page navigation or location changes, bypassing the configured SSRF policy guards. The fix adds a shared post-interaction location guard that performs additional validation after these actions complete, including delayed-navigation probes to catch JavaScript-driven redirects. The vulnerability requires an existing browser session and network access to the OpenClaw service, but does not require user interaction beyond triggering the affected routes. The issue was patched in v2026.4.10 via PR #64370.

Affected products

  • openclaw openclaw < 2026.4.10

Timeline

  • 2026-04-17: disclosed: Advisory published
  • 2026-04-10: patched: Fix merged in PR #64370; patched in v2026.4.10
  • 2026-05-05: other: NVD published CVE-2026-43573

References