CVE-2026-17458

Affected software: mf-yang openclaw-cn (versions up to 0.2.1). The vulnerability resides in the Browser Control HTTP API, specifically the function clickViaPlaywright in src/browser/routes/agent.act.ts. Root cause: manipulation of the function leads to server-side request forgery. Impact: enables...