ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-43573
7.7высокая

CVE-2026-43573

Описание

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement.

Затрагиваемое ПО
Openclaw Openclaw
CVSS
Балл7.7 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Источники
https://github.com/openclaw/openclaw/commit/daeb74920d5ad986cb600625180037e23221e93ahttps://github.com/openclaw/openclaw/security/advisories/GHSA-527m-976r-jf79https://www.vulncheck.com/advisories/openclaw-ssrf-policy-bypass-in-existing-session-browser-interaction-routes