4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43573

CVE-2026-43573: OpenClaw < 2026.4.10 - SSRF Policy Bypass in Existing-Session Browser Interaction Routes

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43573

CVE-2026-43573:

4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the openclaw package, specifically in the handling of browser interactions for existing sessions. The provided commit daeb74920d5ad986cb600625180037e23221e93a clearly shows that the fix involves adding a navigation guard to several browser actions within the registerBrowserAgentActRoutes function in extensions/browser/src/browser/routes/agent.act.ts. The vulnerability was that actions like click, type, press, and evaluate could trigger navigations that bypassed the SSRF policy. The patch introduces the runExistingSessionActionWithNavigationGuard function, which wraps the execution of these actions and performs a post-interaction navigation check using assertExistingSessionPostInteractionNavigationAllowed. This new function repeatedly checks the browser's location after an action to ensure any resulting navigation is compliant with the configured SSRF policy. The vulnerable function is identified as registerBrowserAgentActRoutes because it contains the logic that was missing these crucial security checks. The exploit would involve sending a sequence of actions to the /act route, which is handled by this function, to trigger an unchecked navigation.

Vulnerable functions

registerBrowserAgentActRoutes

extensions/browser/src/browser/routes/agent.act.ts

This function is responsible for registering and handling browser agent actions. Before the patch, for existing browser sessions, this function did not enforce Server-Side Request Forgery (SSRF) policies on navigations that could be triggered by interactions like clicks or form submissions. This allowed a carefully crafted sequence of actions to bypass the intended SSRF protection and cause the browser to navigate to a protected or internal URL. The vulnerability was not in a single function but in the lack of a security check across multiple code paths within `registerBrowserAgentActRoutes`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.