6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-45cg-2683-gfmq

GHSA-45cg-2683-gfmq: OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files

Impact

assertBrowserNavigationAllowed() validated only http:/https: network targets but implicitly allowed other schemes. An authenticated gateway user could navigate browser sessions to file:// URLs and read local files via browser snapshot/extraction flows.

Affected Component

src/browser/navigation-guard.ts

Technical Reproduction

Authenticate to a gateway that has browser tooling enabled.
Invoke browser navigation with a file:// URL (for example file:///etc/passwd).
Read page content through browser snapshot/extract actions.

Demonstrated Impact

An attacker with valid gateway credentials and browser-tool access can exfiltrate local files readable by the OpenClaw process user (for example config/secrets in that user context).

Environment

OpenClaw browser tool enabled
Attacker has authenticated access capable of invoking browser actions

Remediation Advice

Reject unsupported navigation schemes and allow only explicitly safe non-network URLs. OpenClaw now blocks non-network schemes (such as file:, data:, and javascript:) while preserving about:blank.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.19-2
Patched in planned next release: 2026.2.21

Fix Commit(s)

220bd95eff6838234e8b4b711f86d4565e16e401

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.21) so once npm 2026.2.21 is published, the advisory can be published directly.

OpenClaw thanks @q1uf3ng for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-45cg-2683-gfmq

GHSA-45cg-2683-gfmq:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.2.21	2026.2.21

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided security advisory and the associated commit 220bd95eff6838234e8b4b711f86d4565e16e401 led to the identification of the vulnerable function. The commit history clearly shows modifications to src/browser/navigation-guard.ts. Specifically, the function assertBrowserNavigationAllowed was altered. Before the patch, the function did not properly handle URL schemes other than http and https. It would exit without raising an error for other schemes, which allowed an attacker to use file:// URLs to access local files. The patch introduces a stricter check, only allowing about:blank as a safe non-network URL and throwing an error for all other non-network schemes. This directly points to assertBrowserNavigationAllowed as the vulnerable function.

Vulnerable functions

assertBrowserNavigationAllowed

src/browser/navigation-guard.ts

The function `assertBrowserNavigationAllowed` in `src/browser/navigation-guard.ts` was vulnerable because it only checked for `http:` and `https:` protocols. If the protocol was not one of these, the function would simply return, effectively allowing the navigation. This allowed the use of other URL schemes like `file://`, which could be used to access local files on the server. The patch fixes this by explicitly blocking any non-network protocol that is not `about:blank`.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

6.5

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-45cg-2683-gfmq: OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files

Impact

Affected Component

Technical Reproduction

Demonstrated Impact

Environment

Remediation Advice

Affected Packages / Versions

Fix Commit(s)

Release Process Note

GHSA-45cg-2683-gfmq:

6.5

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

Basic Information

Basic Information

6.5

6.5

GHSA-45cg-2683-gfmq: OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files

Impact

Affected Component

Technical Reproduction

Demonstrated Impact

Environment

Remediation Advice

Affected Packages / Versions

Fix Commit(s)

Release Process Note

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI