GHSA-3fqr-4cg8-h96q

Source

https://github.com/advisories/GHSA-3fqr-4cg8-h96q

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-3fqr-4cg8-h96q/GHSA-3fqr-4cg8-h96q.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-3fqr-4cg8-h96q

Aliases

CVE-2026-26317

Published

2026-02-18T00:53:59Z

Modified

2026-02-20T16:52:03Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L CVSS Calculator

Summary

OpenClaw affected by cross-site request forgery (CSRF) through loopback browser mutation endpoints

Details

Summary

Browser-facing localhost mutation routes accepted cross-origin browser requests without explicit Origin/Referer validation. Loopback binding reduces remote exposure but does not prevent browser-initiated requests from malicious origins.

Impact

A malicious website can trigger unauthorized state changes against a victim's local OpenClaw browser control plane (for example opening tabs, starting/stopping the browser, mutating storage/cookies) if the browser control service is reachable on loopback in the victim's browser context.

Affected Packages / Versions

openclaw (npm): <= 2026.2.13
clawdbot (npm): <= 2026.1.24-3

Details

The browser control servers bind to loopback but exposed mutating HTTP endpoints without a CSRF-style guard. Browsers may send cross-origin requests to loopback addresses; without explicit validation, state-changing operations could be triggered from a non-loopback Origin/Referer.

Fix

Mutating HTTP methods (POST/PUT/PATCH/DELETE) are rejected when the request indicates a non-loopback Origin/Referer (or Sec-Fetch-Site: cross-site).

Fix Commit(s)

openclaw/openclaw: b566b09f81e2b704bf9398d8d97d5f7a90aa94c3

Workarounds / Mitigations

Enable browser control auth (token/password) and avoid running with auth disabled.
Upgrade to a release that includes the fix.

Credits

Reporter: @vincentkoc

Release Process Note

patched_versions is set to the planned next release version. Once that npm release is published, the advisory should be ready to publish with no further edits.

Database specific

{
    "cwe_ids":  [
        "CWE-352"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-02-18T00:53:59Z",
    "nvd_published_at":  "2026-02-19T22:16:47Z",
    "severity":  "HIGH"
}

References

Affected packages

npm / openclaw

Package

Name: openclaw; View open source insights on deps.dev
Purl: pkg:npm/openclaw

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2026.2.14

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-3fqr-4cg8-h96q/GHSA-3fqr-4cg8-h96q.json"

npm / clawdbot

Package

Name: clawdbot; View open source insights on deps.dev
Purl: pkg:npm/clawdbot

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2026.1.24-3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/02/GHSA-3fqr-4cg8-h96q/GHSA-3fqr-4cg8-h96q.json"