4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43576

CVE-2026-43576: OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets

Summary

CDP /json/version WebSocket URL could pivot to untrusted second-hop targets.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.5
Patched versions: >= 2026.4.5

Impact

A browser profile could trust a CDP /json/version response whose webSocketDebuggerUrl pointed at a different host, enabling a second-hop SSRF-style pivot.

Technical Details

The fix normalizes and re-validates direct CDP WebSocket targets before connecting.

Fix

The issue was fixed in #60469. The first stable tag containing the fix is v2026.4.5, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

bc356cc8c2beaa747c71dd86cceab8f804699665
PR: #60469

Release Process Note

Users should upgrade to openclaw 2026.4.5 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @tdjackey for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43576

CVE-2026-43576:

4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.5	2026.4.5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists within the openclaw package, specifically in how it handles Chrome DevTools Protocol (CDP) connections. The core of the issue lies in the createTargetViaCdp function located in extensions/browser/src/browser/cdp.ts. The vulnerability description indicates that a CDP /json/version response with a malicious webSocketDebuggerUrl could lead to a second-hop SSRF. The provided patch bc356cc8c2beaa747c71dd86cceab8f804699665 confirms this. The patch modifies the createTargetViaCdp function to add validation for direct WebSocket URLs. Previously, if a URL was already a WebSocket URL, it would bypass the discovery and validation process, and the URL would be used directly. This allowed a malicious actor to specify a WebSocket URL pointing to an internal service, which the system would then connect to. The fix involves adding the assertCdpEndpointAllowed(opts.cdpUrl, opts.ssrfPolicy) check for direct WebSocket URLs, ensuring they comply with the SSRF policy before a connection is attempted. Therefore, the createTargetViaCdp function is the primary vulnerable function, as it was responsible for processing the untrusted URL.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

4.9

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-43576: OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

CVE-2026-43576:

4.9

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

CVE-2026-43576: OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Basic Information

Basic Information

4.9

4.9

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI