VulnSocial

CVE-2026-17458Disclosure

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard
1.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 3 mentions (2026-07-26); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-07-26: 3Mentions · 2026-08-03: 1PoC Mentioned / Linked · 2026-07-26: 1Technical Details · 2026-07-26: 1Technical Details · 2026-08-03: 107-2608-03
Signal classification2 categories
Disclosure
375.0%
PoC
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-263
Disclosure2PoC1
2026-08-031
Disclosure1
Full discourse4 posts
  • Kevin Kaminski@kkaminsk
    Disclosure

    Security researchers detailed chained attack paths: untrusted skills → browser automation → file handlers = data exfiltration routes. CVE-2026-17458 shows SSRF guards missing re-validation after click-driven nav. ClawArmor by AccuKnox launches as the first purpose-built runtime security layer for OpenClaw. 3/5

    Post summary

    The text announces a new SSRF vulnerability (CVE-2026-17458) with missing re‑validation, but provides no PoC, exploit, patch or evidence of active exploitation.

    10000129
    1.6K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-17458 A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the componen… https://www.cve.org/CVERecord?id=CVE-2026-17458

    Post summary

    The text announces CVE-2026-17458 affecting a specific function in mf-yang OpenCLAW‑CN, linking to the CVE record for more details.

    00000720
    57.8K followersView on X
  • MalwareObserver@MalwareObserver
    PoC

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-17458](https://github.com/mf-yang/openclaw-cn/) A vulnerability was found in mf-yang op... https://github.com/mf-yang/openclaw-cn/ #ZeroDay #PatchManagement #Vulnerability

    Post summary

    A GitHub repository is linked for CVE‑2026‑17458, indicating that a proof‑of‑concept exists, but no exploit code, patch, or active exploitation details are mentioned.

    0000043
    16 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-17458 Server-Side Request Forgery in mf-yang openclaw-cn Browser Control HTTP API https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17458

    Post summary

    The text announces CVE‑2026‑17458, describing it as a Server‑Side Request Forgery flaw in mf‑yang’s openclaw‑cn Browser Control HTTP API, without providing exploitation or mitigation details.

    00000147
    4.1K followersView on X

Explore more

Back to dashboard