Executive brief
OpenClaw, a browser automation or interaction library, contains a vulnerability where certain user-driven actions like typing or pressing keys can bypass security checks. This could allow the software to make unintended network requests to internal systems, potentially exposing sensitive internal data or services. Organizations using this library for automated browsing or testing should update to prevent unauthorized internal network access.
Technical details
A Server-Side Request Forgery (SSRF) vulnerability exists in OpenClaw due to incomplete navigation guard coverage during specific browser interactions. Specifically, 'pressKey' and 'type' submit flows could trigger navigations that bypass post-action SSRF policy enforcement. An attacker could potentially leverage these interaction routes to force the application to navigate to unauthorized internal or external URLs. The fix introduces a three-phase interaction navigation guard to ensure all navigation-capable interactions are properly validated. Patches are available in version 2026.4.10 and later.
Affected products
- openclaw openclaw < 2026.4.10
Timeline
- 2026-04-16: patched: Initial fix published in version 2026.4.10
- 2026-04-17: advisory: GitHub Advisory published