CVE-2026-43573

creationtimestamp| type| source ---|---|--- 2026-05-05 12:59:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml4ajlkjrp2o 2026-05-05 16:35:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mlqhxf52t 2026-05-05 20:54:35+00:00| seen|...

CVE-2026-43573

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement...