Junglewise Threat Intelligence

OpenClaw incomplete navigation guard in browser interactions

Severity: high · CVSS 7.7 · Published 2026-05-06

Technologies: Openclaw. Vendors: Openclaw.

Executive brief

OpenClaw, a browser automation and interaction library, contains a security flaw where certain user-like actions (such as pressing keys or submitting forms) can bypass safety filters. This allows an attacker to force the browser to navigate to restricted internal web addresses that should be blocked. Such an exploit could lead to Server-Side Request Forgery (SSRF), potentially exposing sensitive internal data or services to unauthorized parties.

Technical details

OpenClaw versions prior to 2026.4.10 are vulnerable to an incomplete navigation guard (CWE-862). The root cause is that specific browser interaction routes, specifically 'pressKey' and 'type' submit flows, did not trigger the full suite of post-action security checks. A remote attacker with low privileges can exploit this to bypass SSRF policies and force the automated browser to navigate to unauthorized internal or external URLs. This bypasses the intended navigation guards designed to enforce security policies on interaction-driven URL changes. The issue is resolved in version 2026.4.10 by implementing a three-phase interaction navigation guard.

Affected products

  • OpenClaw openclaw < 2026.4.10

Timeline

  • 2026-04-16: advisory: Original advisory GHSA-536q-mj95-h29h published
  • 2026-05-06: advisory: Duplicate advisory GHSA-wwwc-f646-vj2j published
  • 2026-05-11: other: Duplicate advisory withdrawn in favor of original

References

Related threats