4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43580

CVE-2026-43580: OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage

Summary

Browser press/type interaction routes missed complete navigation guard coverage.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Some browser press/type style interactions could trigger navigation without complete post-action SSRF policy enforcement.

Technical Details

The fix applies a three-phase interaction navigation guard to navigation-capable interactions, including pressKey and type submit flows.

Fix

The issue was fixed in #62023 and #63226 and #63889. The first stable tag containing the fix is v2026.4.10, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

049acf23cb03e1b92f5c71cd99c6ec5f35cc56fe
5f5b3d733bdd791cb457f838514179e1288b10b3
e0b8ddc1a55185aff1cf9e0e095014d2e4f1d894
PR: #62023, #63226, #63889

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43580

CVE-2026-43580:

4.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in a failure to re-validate the browser's current URL against the application's Server-Side Request Forgery (SSRF) policy after a user-driven browser interaction. Functions like clickViaPlaywright, pressKeyViaPlaywright, and evaluateViaPlaywright simulate user actions. An attacker could create a scenario where these actions trigger a client-side redirect (e.g., using JavaScript) to an internal or otherwise restricted URL.

Prior to the fix, the application performed an SSRF check upon initial navigation but did not re-run this check after these in-page interactions. This created a window of opportunity for an attacker to bypass the SSRF policy. For example, a click could navigate the browser to an internal server, and a subsequent call to a snapshot function (snapshotAiViaPlaywright, etc.) would then read the content of that internal page, exfiltrating sensitive information.

The patch addresses this by introducing a robust, multi-phase navigation guard (assertInteractionNavigationCompletedSafely) that is applied after any interaction that could potentially cause navigation. This guard checks for URL changes immediately after the action and also waits for a brief period to catch delayed, script-triggered navigations, thus closing the SSRF bypass loophole.

Vulnerable functions

clickViaPlaywright

extensions/browser/src/browser/pw-tools-core.interactions.ts

This function simulates a click in the browser. A malicious page could use this interaction to trigger a client-side navigation to an internal URL, bypassing SSRF protections. The lack of a post-interaction navigation check made it vulnerable.

pressKeyViaPlaywright

extensions/browser/src/browser/pw-tools-core.interactions.ts

This function simulates a key press. A key press (e.g., 'Enter' in a form) can trigger navigation. The vulnerability existed because the application did not re-verify the page's URL against the SSRF policy after the key press action was completed.

typeViaPlaywright

extensions/browser/src/browser/pw-tools-core.interactions.ts

This function can be used to type text and submit forms. When `submit: true`, it simulates an 'Enter' key press, which can cause form submission and navigation. The vulnerability was that this navigation was not checked against the SSRF policy.

evaluateViaPlaywright

extensions/browser/src/browser/pw-tools-core.interactions.ts

This function executes arbitrary JavaScript code in the context of the page. This code could easily set `window.location.href` to navigate to a new, potentially malicious URL. The function was vulnerable because it lacked any post-execution check to validate the resulting URL.

snapshotAriaViaPlaywright

extensions/browser/src/browser/pw-tools-core.snapshot.ts

This function takes a snapshot of the page's accessibility tree. If a prior interaction (like a click) caused a navigation to a forbidden internal page, this function would then proceed to read and potentially exfiltrate content from that internal page. The vulnerability is operating on a page that could have been redirected without proper checks.

snapshotAiViaPlaywright

extensions/browser/src/browser/pw-tools-core.snapshot.ts

Similar to other snapshot functions, this function was vulnerable because it could be executed after an unchecked navigation has occurred, leading to it capturing and exfiltrating data from a protected internal resource.

snapshotRoleViaPlaywright

extensions/browser/src/browser/pw-tools-core.snapshot.ts

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

4.9

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-43580: OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

CVE-2026-43580:

4.9

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

4.9

4.9

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

CVE-2026-43580: OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI