CVE-2026-41912
Published: 28 April 2026
Summary
CVE-2026-41912 is a medium-severity SSRF (CWE-918) vulnerability in Openclaw Openclaw. Its CVSS base score is 4.8 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 10.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-4 (Information Flow Enforcement) and SI-10 (Information Input Validation).
Deeper analysis
CVE-2026-41912 is a server-side request forgery (SSRF) policy bypass vulnerability affecting OpenClaw versions prior to 2026.4.8. The flaw enables attackers to trigger navigations via browser interactions that circumvent standard SSRF checks, allowing access to restricted resources. It is classified under CWE-918: Server-Side Request Forgery and carries a CVSS v3.1 base score of 7.6 (AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N). The vulnerability was published on 2026-04-28.
The attack requires low privileges (PR:L) and user interaction (UI:R), such as engaging with malicious browser content over the network (AV:N) with low complexity (AC:L). Attackers can exploit this to bypass SSRF protections, achieving high confidentiality impact (C:H) with a changed scope (S:C), thereby accessing otherwise restricted resources through forged server-side requests.
Mitigation details are provided in the patching commit at https://github.com/openclaw/openclaw/commit/d7c3210cd6f5fdfdc1beff4c9541673e814354d5, the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-vr5g-mmx7-h897, and the VulnCheck advisory at https://www.vulncheck.com/advisories/openclaw-server-side-request-forgery-policy-bypass-via-interaction-triggered-navigation. OpenClaw 2026.4.8 addresses the issue.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-26118
Vulnerability details
OpenClaw before 2026.4.8 contains a server-side request forgery policy bypass vulnerability allowing attackers to trigger navigations bypassing normal SSRF checks. Attackers can exploit browser interactions to bypass SSRF protections and access restricted resources.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The SSRF policy bypass in the public-facing OpenClaw server application directly enables exploitation of public-facing applications to access restricted resources via forged server-side requests.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Validates browser interaction inputs to prevent malicious navigations that bypass SSRF policy checks and trigger unauthorized server-side requests.
Enforces approved information flow policies to block server-side requests to restricted resources exploited via the SSRF policy bypass.
Monitors and controls outbound communications at system boundaries to mitigate unauthorized access attempts resulting from SSRF exploitation.