Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-45cg-2683-gfmq
Advisory ID github_osv/GHSA-45cg-2683-gfmq
Aliases CVE-2026-32008
Summary OpenClaw browser navigation guard allowed non-network URL schemes, enabling authenticated browser-tool users to access file:// local files ## Impact `assertBrowserNavigationAllowed()` validated only `http:`/`https:` network targets but implicitly allowed other schemes. An authenticated gateway user could navigate browser sessions to `file://` URLs and read local files via browser snapshot/extraction flows. ## Affected Component - `src/browser/navigation-guard.ts` ## Technical Reproduction 1. Authenticate to a gateway that has browser tooling enabled. 2. Invoke browser navigation with a `file://` URL (for example `file:///etc/passwd`). 3. Read page content through browser snapshot/extract actions. ## Demonstrated Impact An attacker with valid gateway credentials and browser-tool access can exfiltrate local files readable by the OpenClaw process user (for example config/secrets in that user context). ## Environment - OpenClaw browser tool enabled - Attacker has authenticated access capable of invoking browser actions ## Remediation Advice Reject unsupported navigation schemes and allow only explicitly safe non-network URLs. OpenClaw now blocks non-network schemes (such as `file:`, `data:`, and `javascript:`) while preserving `about:blank`. ## Affected Packages / Versions - Package: `openclaw` (npm) - Affected versions: `<= 2026.2.19-2` - Patched in planned next release: `2026.2.21` ## Fix Commit(s) - `220bd95eff6838234e8b4b711f86d4565e16e401` ## Release Process Note `patched_versions` is pre-set to the planned next release (`2026.2.21`) so once npm `2026.2.21` is published, the advisory can be published directly. OpenClaw thanks @q1uf3ng for reporting.
Status Published
Exploitability 0.5
Weighted Severity 5.9
Risk 3.0
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-610 Externally Controlled Reference to a Resource in Another Sphere
System Score Found at
cvssv3.1 6.5 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-45cg-2683-gfmq/GHSA-45cg-2683-gfmq.json
generic_textual MODERATE
Reference id Reference type URL
https://github.com/openclaw/openclaw
220bd95eff6838234e8b4b711f86d4565e16e401 Other https://github.com/openclaw/openclaw/commit/220bd95eff6838234e8b4b711f86d4565e16e401
GHSA-45cg-2683-gfmq Advisory https://github.com/openclaw/openclaw/security/advisories/GHSA-45cg-2683-gfmq
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-45cg-2683-gfmq/GHSA-45cg-2683-gfmq.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-03-20T17:04:05Z/

Decision: Track

Source URL: https://github.com/cisagov/vulnrichment/blob/develop/2026/32xxx/CVE-2026-32008.json

Source Advisory: vulnrichment/CVE-2026-32008

View SSVC decision tree 
[{'Exploitation': 'poc'},
 {'Automatable': 'no'},
 {'Technical Impact': 'partial'},
 {'Mission Prevalence': 'minimal'},
 {'Public Well-being Impact': 'material'},
 {'Mission & Well-being': 'medium'}]