CVE-2026-43582

MEDIUM

OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass

Title source: cna
STIX 2.1

Description

OpenClaw before 2026.4.10 contains a server-side request forgery vulnerability in browser navigation policy that allows attackers to bypass hostname validation through DNS rebinding attacks. Attackers can exploit inconsistent hostname resolution between validation and actual network requests to pivot to internal resources via unallowlisted hostname URLs.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory
GitHub Security Advisory (GHSA-xq94-r468-qwgj)
https://github.com/openclaw/openclaw/security/advisories/GHSA-xq94-r468-qwgj
Third Party Advisory third-party-advisory
VulnCheck Advisory: OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass
https://www.vulncheck.com/advisories/openclaw-dns-rebinding-ssrf-via-hostname-validation-bypass

Scores

CVSS v3 6.3
EPSS 0.0003
EPSS Percentile 9.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-367
Status published
Products (4)
npm/openclaw 0 - 2026.4.10npm
OpenClaw/OpenClaw < 2026.4.10
openclaw/openclaw < 2026.4.10
OpenClaw/OpenClaw 2026.4.10
Published May 06, 2026
Tracked Since May 07, 2026