4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-42436

CVE-2026-42436: OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes

OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser target after navigation. Authenticated callers can bypass SSRF restrictions to expose internal or disallowed page content by exploiting route-driven navigation without proper policy re-validation.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-42436

CVE-2026-42436:

4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.14	2026.4.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the lack of SSRF validation on browser tab URLs after a potential navigation event. The affected routes are those that interact with browser tabs, such as taking screenshots, snapshots, or managing tabs. An attacker could exploit this by causing a navigation to an internal URL and then using one of the vulnerable routes to access content from that internal page. The patch addresses this by consistently applying SSRF policy checks on tab URLs across the snapshot, screenshot, and tab management routes before returning any content or completing an action. The analysis of the commit b75ad800a59009fc47eaa3471410f69046150e59 clearly shows the addition of these checks in the functions registerBrowserAgentSnapshotRoutes, registerBrowserTabRoutes, and registerBrowserAgentActRoutes.

Vulnerable functions

registerBrowserAgentSnapshotRoutes

extensions/browser/src/browser/routes/agent.snapshot.ts

The snapshot and screenshot routes did not validate the final browser target URL against the configured SSRF policy. This could allow an attacker to capture content from internal pages if a navigation event redirects the browser to an internal URL. The patch adds a call to `assertBrowserNavigationResultAllowed` to validate the tab's URL before taking a snapshot or screenshot.

registerBrowserTabRoutes

extensions/browser/src/browser/routes/tabs.ts

The tab management routes, such as listing, focusing, or selecting tabs, did not validate the URLs of the tabs against the SSRF policy. This could lead to information disclosure of internal URLs or allow interaction with internal pages. The patch introduces `redactBlockedTabUrls` to hide the URLs of blocked tabs and adds checks in focus and select actions using `assertBrowserNavigationResultAllowed`.

registerBrowserAgentActRoutes

extensions/browser/src/browser/routes/agent.act.ts

The agent action routes, which handle browser interactions, did not check for new tabs opened during an interaction. An action like a click could trigger navigation to a new tab pointing to an internal URL, bypassing SSRF protection. The patch adds a check for any newly opened tabs to ensure their URLs comply with the SSRF policy.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.