PT-2026-35808

CVE-2026-42430

Published

2026-04-09

Updated

2026-04-29

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8

Description An issue in Playwright redirect handling allows attackers to bypass strict Server-Side Request Forgery (SSRF) checks. By exploiting request-time navigation, attackers can reach private targets that are intended to be restricted by browser SSRF protections. SSRF is a flaw where an attacker can force a server-side application to make HTTP requests to an arbitrary domain of the attacker's choosing.

Recommendations Update to version 2026.4.8.

Exploitability

Exploit

Fix

Impacts

Researchers

Keensecuritylab

Smaeljaish771

Vendors

Affected products

Weakness enumeration

CWE-918: Server-Side Request Forgery (SSRF)