CVE-2026-40037
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
OpenClaw before version 2026.3.31 (patched in 2026.4.8) has a request body replay vulnerability in fetchWithSsrFGuard, allowing unsafe request bodies to be resent across cross-origin redirects. Attackers can exploit this to exfiltrate sensitive request data or headers to unintended origins.
Risk Assessment
The risk involves leakage of sensitive data such as authorization tokens, personal information, or API keys to unauthorized domains during redirects.
Recommendation
Update OpenClaw to version 2026.4.8 or later, which fixes this vulnerability.
Original NVD description (English source)
OpenClaw before 2026.3.31 (patched in 2026.4.8) contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request bodies to be resent across cross-origin redirects. Attackers can exploit this by triggering redirects to exfiltrate sensitive request data or headers to unintended origins.