Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the final browser target after navigation. Authenticated callers can bypass SSRF restrictions to expose internal or disallowed page content by exploiting route-driven navigation without proper policy re-validation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-42436 OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the fin… https://www.cve.org/CVERecord?id=CVE-2026-42436
Post summary
The tweet references CVE‑2026‑42436, noting an improper access control issue in OpenClaw but provides no PoC, exploitation details, or patch information.
🚨*CVE* CVE-2026-42436 OpenClaw before 2026.4.14 contains an improper access control vulnerability in browser snapshot, screenshot, and tab routes that fail to consistently validate the fin… https://www.cve.org/CVERecord?id=CVE-2026-42436 ----- Traducción: CVE-2026-42436 Ope… http://infoflow.cloud`
Post summary
The tweet simply announces CVE‑2026‑42436, noting an improper access control flaw in OpenClaw versions older than 2026.4.14, without providing any PoC, exploit code, or mitigation details.