| Package | Affected versions | Patched versions |
|---|---|---|
| openclaw | ≥ 2026.4.14, < 2026.5.26 | 2026.5.26 |
OpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browser snapshot routes that fail to validate post-navigation destinations. Attackers with lower-trust access can bypass OpenClaw policy checks to reach network destinations that should have been blocked.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free