Lucene search
+L

6 matches found

Snyk
Snyk
added 2026/07/17 1:33 a.m.13 views

Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the browser act route due to improper validation of the current-tab URL checks. An attacker can gain unauthorized access to actions requiring higher...

8.5CVSS5.4AI score0.00334EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/17 12:07 a.m.14 views

CVE-2026-62226 OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

8.5CVSS5.4AI score0.00334EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/07/17 12:07 a.m.12 views

CVE-2026-62226

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

8.5CVSS6.1AI score0.00334EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/07/17 12:07 a.m.16 views

CVE-2026-62226 OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

5.1CVSS5.3AI score
SaveExploits0References5
CVE
CVE
added 2026/07/17 12:07 a.m.23 views

CVE-2026-62226

OpenClaw 2026.3.28 before 2026.5.19 contains an authorization bypass in the browser act route, due to failure to properly validate current-tab URL checks. This allows attackers with lower-trust access or configured input paths to perform actions that should be restricted by stronger authorization...

8.5CVSS6.1AI score0.00334EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/17 12:00 a.m.18 views

PT-2026-60636

OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate current-tab URL checks. Attackers with lower-trust access or configured input paths can perform actions requiring stronger authorization or policy checks...

8.5CVSS6.1AI score0.00334EPSS
SaveExploits0References2
Rows per page
Query Builder