CVE-2026-17458
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability in openclaw-cn up to version 0.2.1 allows Server-Side Request Forgery (SSRF) via the clickViaPlaywright function in agent.act.ts. The attack can be performed remotely and the exploit has been publicly disclosed.
Risk Assessment
An attacker can send requests to internal network resources, potentially leading to data disclosure or further system compromise.
Recommendation
Update openclaw-cn to the latest version or restrict API access and apply URL filtering.
Other vulnerabilities in openclaw-cn
See all- CVE-2026-19008Medium
A vulnerability was found in mf-yang openclaw-cn up to 0.2.1 in the assertNoSymlinkEscape function of src/agents/sandbox-paths.ts, in the apply_patch Tool component. The issue is link following. The attack can be launched remotely. The exploit is public. The project was informed but has not responded.
- CVE-2026-19007Medium
A vulnerability in mf-yang openclaw-cn up to 0.2.1 affects the function isApprovedElevatedSender in src/auto-reply/reply/reply-elevated.ts, causing improper privilege management. Remote exploitation is possible and the exploit is public.
- CVE-2026-19006Medium
A vulnerability in mf-yang openclaw-cn 2026.2.5 affects an unknown part of src/agents/bash-tools.exec.ts in the Ggateway Exec Approval Flow, leading to incorrect authorization. Remote attack is possible and exploit is public.
- CVE-2026-17457Medium
A vulnerability in openclaw-cn up to version 0.2.1 allows information disclosure via the assertBrowserNavigationAllowed function in navigation-guard.ts. Manipulation of the url argument leads to data leakage. The attack can be performed remotely and the exploit has been publicly disclosed.
Original NVD description (English source)
A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.