Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-43573 OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF… https://www.cve.org/CVERecord?id=CVE-2026-43573
Post summary
The post announces CVE‑2026‑43573, detailing a SSRF policy bypass in OpenClaw before version 2026.4.10, but gives no PoC, exploit code, active attack evidence, or remediation guidance.
Attention, elevated activities detected targeting OpenClaw (CVE-2026-43573) https://vuldb.com/vuln/361168/cti
Post summary
An alert flags elevated activity targeting OpenClaw associated with CVE-2026-43573, linking to a vulnerability database entry without further details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |