CVE-2026-53812

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.5.18

Description An issue in browser control allows authenticated users to perform server-side request forgery (SSRF), which is a flaw that enables an attacker to induce the server-side application to make requests to an unintended location. This allows the bypass of private-network navigation checks through Playwright act interactions. Attackers can trigger navigation to private-network targets via action-triggered redirects and subsequently read restricted page content using browser evaluation capabilities.

Recommendations Update to version 2026.5.18.