CVE-2026-17457

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-17457
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-17457.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-17457
Published
2026-07-26T09:30:11.264Z
Modified
2026-07-29T03:30:15.961642570Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
mf-yang openclaw-cn Scheme navigation-guard.ts assertBrowserNavigationAllowed information disclosure
Details

A vulnerability has been found in mf-yang openclaw-cn up to 0.2.1. Affected by this issue is the function assertBrowserNavigationAllowed of the file src/browser/navigation-guard.ts of the component Scheme Handler. Such manipulation of the argument url leads to information disclosure. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/17xxx/CVE-2026-17457.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-200",
        "CWE-284"
    ]
}
References

Affected packages

Git / github.com/mf-yang/openclaw-cn

Affected ranges

Type
GIT
Repo
https://github.com/mf-yang/openclaw-cn
Events
Introduced
1b9f16468d9841871cb15103693c3923424c9842
Last affected
558f272e6c90e7e0c37644e505e161b91ef738f0
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0.2.0"
        },
        {
            "last_affected": "0.2.0"
        },
        {
            "introduced": "0.2.1"
        },
        {
            "last_affected": "0.2.1"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*
0.2.0
0.2.1
v0.*
v0.2.0
v0.2.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-17457.json"