Staging Environment: Content and features may be unstable or change without notice.
Advisory details: github_osv / GHSA-wwwc-f646-vj2j
Advisory ID github_osv/GHSA-wwwc-f646-vj2j
Aliases
Summary Duplicate Advisory: OpenClaw: Browser press/type interaction routes missed complete navigation guard coverage ### Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-536q-mj95-h29h. This link is maintained to preserve external references. ### Original Description OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforcement. Browser press/type style interactions, including pressKey and type submit flows, can bypass post-action security checks to execute unauthorized navigation.
Status Published
Exploitability 0.5
Weighted Severity 6.9
Risk 3.5
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (1)
CWE-862 Missing Authorization
System Score Found at
cvssv3.1 7.7 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-wwwc-f646-vj2j/GHSA-wwwc-f646-vj2j.json
cvssv4 4.9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-wwwc-f646-vj2j/GHSA-wwwc-f646-vj2j.json
generic_textual MODERATE
Reference id Reference type URL
https://github.com/openclaw/openclaw/commit/049acf23cb03e1b92f5c71cd99c6ec5f35cc56fe
https://github.com/openclaw/openclaw/commit/5f5b3d733bdd791cb457f838514179e1288b10b3
https://github.com/openclaw/openclaw/commit/e0b8ddc1a55185aff1cf9e0e095014d2e4f1d894
https://github.com/openclaw/openclaw/security/advisories/GHSA-536q-mj95-h29h
CVE-2026-43580 https://nvd.nist.gov/vuln/detail/CVE-2026-43580
openclaw-incomplete-navigation-guard-coverage-in-browser-interactions Advisory https://www.vulncheck.com/advisories/openclaw-incomplete-navigation-guard-coverage-in-browser-interactions
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-wwwc-f646-vj2j/GHSA-wwwc-f646-vj2j.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X Found at https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-wwwc-f646-vj2j/GHSA-wwwc-f646-vj2j.json
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

There are no SSVC decisions available.