CVE-2026-43577

OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes

Published May 6, 2026 CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Description

OpenClaw before 2026.4.9 contains a file read vulnerability allowing attackers to bypass navigation guards through browser act/evaluate interactions. Attackers can pivot into the local CDP origin and create or read disallowed file:// pages despite direct navigation policy restrictions.

Analysis

Technical impact

OpenClaw before 2026.4.9 contains a file read vulnerability that enables attackers to bypass navigation guards using browser act/evaluate interactions. Attackers can pivot into the local CDP origin and create or read disallowed file:// pages despite normal navigation policy restrictions, allowing unauthorized access to sensitive files on the host system.

Affected Systems

The vulnerability affects OpenClaw versions earlier than 2026.4.9. The affected product is the OpenClaw application bundled with Node.js, version specification not detailed beyond the noted cutoff.

Risk and Exploitability

The CVSS score of 7.1 indicates a high severity with potential confidentiality impact. EPSS is not available, and the vulnerability is not listed in CISA KEV. The likely attack vector is through a browser interaction that forces the application to load file:// URLs, so it requires a user to open a crafted link or malicious page; remote exploitation over the network is unlikely without this user interaction.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

OpenClaw

unaffected

Version	Status	Constraints
`0`	affected	< 2026.4.9
`2026.4.9`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*

No data.

Vendor Product Versions

Openclaw

Version	Status	Scheme	Platform
`[0,2026.4.9)`	affected	semver	['node.js']
`2026.4.9`	unaffected	semver	['node.js']

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update OpenClaw to version 2026.4.9 or later to apply the vendor patch.
If an update is not immediately available, disable or restrict the browser act/evaluate interface so that the application cannot pivot to the local CDP origin.
Implement monitoring of file:// access patterns and log CDP origin activity to detect potential misuse.

Generated by OpenCVE AI on May 6, 2026 at 21:35 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.253% probability within 30 days)

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/openclaw/openclaw/commit/5f5b3d733bdd791cb457f838514179e1288b10b3
https://github.com/openclaw/openclaw/security/advisories/GHSA-qmwg-qprg-3j38
https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-browser-interaction-routes

History

May 7, 2026 6:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

May 6, 2026 8:15 PM Description updated. Title updated. First appearance in the feed. Weaknesses updated. Affected versions updated. Affected vendors updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		OpenClaw before 2026.4.9 contains a file read vulnerability allowing attackers to bypass navigation guards through browser act/evaluate interactions. Attackers can pivot into the local CDP origin and create or read disallowed file:// pages despite direct navigation policy restrictions.
Title		OpenClaw < 2026.4.9 - Arbitrary File Read via Browser Interaction Routes
First Time appeared		Openclaw Openclaw openclaw
Weaknesses		CWE-862
CPEs		cpe:2.3:a:openclaw:openclaw::::::node.js::*
Vendors & Products		Openclaw Openclaw openclaw
References		https://github.com/openclaw/openclaw/commit/5f5b3d733bdd791cb457f838514179e1288b10b3 https://github.com/openclaw/openclaw/security/advisories/GHSA-qmwg-qprg-3j38 https://www.vulncheck.com/advisories/openclaw-arbitrary-file-read-via-browser-interaction-routes
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}` cvssV4_0 `{'score': 7.1, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}`