CVE-2026-43580: OpenClaw Vulnerability Bypasses SSRF Protections
The National Vulnerability Database has disclosed CVE-2026-43580, a high-severity vulnerability (CVSS 7.7) affecting OpenClaw before version 2026.4.10. This flaw, classified as an incomplete navigation guard (CWE-862), allows attackers to bypass Server-Side Request Forgery (SSRF) policy enforcement.
Specifically, browser interactions like pressKey and type submit flows can trigger navigation without proper post-action security checks. This means an attacker can force unauthorized navigation, potentially leading to data exfiltration or internal network access, despite existing SSRF mitigations.
While the National Vulnerability Database has not specified affected products beyond OpenClaw, the implications are broad for any system relying on OpenClaw’s navigation guards for SSRF protection. Attackers will likely leverage this for initial access or privilege escalation, turning what should be a secure interaction into a vector for deeper compromise.
What This Means For You
- If your organization utilizes OpenClaw, immediately check your version. Patch to OpenClaw 2026.4.10 or newer without delay. Audit any applications that use OpenClaw for SSRF policy enforcement, as this vulnerability directly undermines those controls. Assume existing SSRF defenses are compromised until this is patched.
Related ATT&CK Techniques
🛡️ Detection Rules
3 rules · 6 SIEM formats3 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
CVE-2026-43580: OpenClaw Incomplete Navigation Guard Bypass
title: CVE-2026-43580: OpenClaw Incomplete Navigation Guard Bypass
id: scw-2026-05-06-ai-1
status: experimental
level: high
description: |
This rule detects attempts to exploit CVE-2026-43580 by targeting the OpenClaw navigation endpoint with a submit action, bypassing SSRF policy enforcement through incomplete navigation guards. This specific URI and query parameter combination is indicative of the described vulnerability.
author: SCW Feed Engine (AI-generated)
date: 2026-05-06
references:
- https://shimiscyberworld.com/posts/nvd-CVE-2026-43580/
tags:
- attack.initial_access
- attack.t1190
logsource:
category: webserver
detection:
selection:
cs-uri|contains:
- '/openclaw/v1/navigate'
cs-uri-query|contains:
- 'action=submit'
condition: selection
falsepositives:
- Legitimate administrative activity
Source: Shimi's Cyber World · License & reuse
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-43580 | SSRF | OpenClaw software versions prior to 2026.4.10 |
| CVE-2026-43580 | Auth Bypass | Incomplete navigation guard in OpenClaw |
| CVE-2026-43580 | SSRF | Bypass of post-action security checks via browser press/type style interactions (pressKey, type submit flows) in OpenClaw |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | May 06, 2026 at 23:16 UTC |
This content was AI-rewritten and enriched by Shimi's Cyber World based on the original source. All intellectual property rights remain with the original author.
Believe this infringes your rights? Submit a takedown request.
Related coverage
CVE-2026-41484 — OpenTelemetry.Exporter.OneCollector is a .NET exporter that
CVE-2026-41484 — OpenTelemetry.Exporter.OneCollector is a .NET exporter that sends telemetry to a OneCollector back-end over HTTP. In versions 1.15.0 and earlier, when a request to...
CVE-2026-41483 — OpenTelemetry.Resources.Azure is the .NET resource detector
CVE-2026-41483 — OpenTelemetry.Resources.Azure is the .NET resource detector for Azure environments. In versions 1.15.0-beta.1 and earlier, the AzureVmMetaDataRequestor class makes HTTP requests to the Azure...
CVE-2026-41417 — Netty allows request-line validation to be bypassed when a
CVE-2026-41417 — Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`....