What is GHSA-527m-976r-jf79?

GHSA-527m-976r-jf79 is a security advisory published by GitHub Security Advisories with Medium severity. OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement

Which CVE IDs does GHSA-527m-976r-jf79 cover?

GHSA-527m-976r-jf79 covers the following CVE IDs: CVE-2026-43573. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-527m-976r-jf79?

GHSA-527m-976r-jf79 has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

Which products are affected by GHSA-527m-976r-jf79?

GHSA-527m-976r-jf79 affects 1 product, including: npm/openclaw:\u003c 2026.4.10.

GHSA-527m-976r-jf79MediumCVSS 7.7

OpenClaw: Existing-session browser interaction routes bypassed SSRF policy enforcement

Vendor

GitHub Security Advisories

Published

April 17, 2026

Last Modified

May 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-43573 →

📋 Description

Summary

Existing-session browser interaction routes bypassed SSRF policy enforcement.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Existing-session browser interaction routes could continue interacting with or navigating targets without applying the same SSRF navigation guard used by guarded browser routes.

Technical Details

The fix guards existing-session navigation and interaction routes with browser navigation policy checks.

Fix

The issue was fixed in #64370. The first stable tag containing the fix is v2026.4.10, and [email protected] includes the fix.

Fix Commit(s)

daeb74920d5ad986cb600625180037e23221e93a
PR: #64370

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

🎯 Affected products1

npm/openclaw:< 2026.4.10