EUVD-2026-104571
GHSA-c9cg-328f-4mvf
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft URL with malicious token value
-
DeliveryDeliver link to victim via phishing
-
ExploitVictim's request hits handleRequest reverse proxy
-
ExecutionServer issues open redirect to attacker site
-
ImpactCredential theft or malware delivery
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V3 - Web Frontend Security Redirect URL validation
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation targets the reverse-proxy 'handleRequest' function in apps/clawhostgo/src/main/services/reverseProxy.ts, where an attacker-supplied 'token' argument is used to construct a redirect destination without adequate validation. No authentication is required (PR:N), but the attack is NOT fully automatic: it depends on social engineering - a victim must follow the attacker-crafted link (UI:P), so success hinges on luring a user rather than on any special server configuration. Impact is limited to redirecting the victim's browser (integrity-only, no confidentiality or availability effect), meaning the practical risk is phishing/credential-harvesting, and it is bounded to deployments actually running the vulnerable reverse-proxy component of clawhost at version 0.0.45 or earlier. |
| Impact | Signals are consistent and point to a genuine-but-low-severity issue rather than an urgent priority. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:P) describes a remotely reachable, unauthenticated, low-complexity flaw, but it requires passive user interaction (UI:P) and yields only low integrity impact (VI:L) with no confidentiality or availability impact - fully consistent with an open redirect (CWE-601), which is typically leveraged for phishing/credential-harvesting rather than direct system compromise. The input Exploit Maturity is E:P (Proof-of-Concept) and a POC is publicly hosted, so public exploit code exists; however, the vulnerability is NOT in CISA KEV and no EPSS score was provided in the input, so there is no evidence of active or widespread exploitation. The low technical impact, the dependence on tricking a victim into following a link, and the obscurity of the affected product all argue against treating this as a high-priority item despite the 'public exploit' flag. Net: a real but minor, low-urgency finding - patch in routine cycles, not an emergency. |
| Exploit ScenarioDerived | An attacker crafts a URL to a clawhost reverse-proxy endpoint with a manipulated 'token' argument that controls the redirect target, then distributes it via phishing email or a malicious link. When a victim clicks it, the handleRequest function in reverseProxy.ts redirects their browser to an attacker-controlled site that can harvest credentials or deliver malware. A proof-of-concept is publicly available, lowering the barrier to abuse. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 19, 2026
Open redirect in antoinersx clawhost through version 0.0.45 allows remote attackers to craft reverse-proxy URLs that send victims to attacker-controlled sites by manipulating the token argument handled in reverseProxy.ts. Exploitation requires user interaction - a victim must follow the crafted link - and impact is limited to integrity (phishing/credential-harvesting), consistent with CVSS 5.3 v4.0 and an assessed CVSS 3.1 score of 4.3. Publicly available exploit code exists, but there is no confirmed active exploitation (not CISA KEV).
RemediationAI
No vendor-released patch is identified at time of analysis; the vendor was contacted early but did not respond, and no fixed version is documented in the references. Until a fix is available, operators should modify the handleRequest logic in apps/clawhostgo/src/main/services/reverseProxy.ts to enforce a strict allowlist of redirect destinations - rejecting absolute or external token values and permitting only relative paths or known first-party hosts - accepting that legitimate external redirects may break. If the reverse-proxy feature is not required, disable or stop exposing that component, with the trade-off of losing its functionality. As a supplementary control, present an interstitial warning before outbound redirects; this adds friction and may be bypassed by users who click through. Because exploitation depends on luring a victim, combine these controls with phishing-resistant authentication and user reporting workflows. Refer to https://vuldb.com/vuln/422332 and https://vuldb.com/cve/CVE-2026-112251 for any updated vendor guidance.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The issue is CWE-601 (URL Redirection to Untrusted Site, or Open Redirect) in the reverse-proxy service implemented at apps/clawhostgo/src/main/services/reverseProxy.ts. In the handleRequest function, an attacker-controlled token argument is used to build a redirect destination without adequate validation, so a crafted request can cause the application to redirect the victim's browser to an arbitrary external site. The CPE cpe:2.3:a:antoinersx:clawhost:*:*:*:*:*:*:*:* identifies antoinersx clawhost as the affected product line, and the report bounds affected versions to 0.0.45 and earlier. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/E:P) and the assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) both indicate no authentication requirement (PR:N) but a user-interaction prerequisite (UI:P/UI:R), with only integrity impact and no confidentiality or availability effect. The practical risk is therefore phishing and credential harvesting through trusted-looking clawhost redirect links, not code execution or data compromise.
Know when Clawhost gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Remotely reachable, unauthenticated open redirect (AV:N/AC:L/PR:N) but requires the victim to click a crafted link (UI:R); impact is integrity-only redirection (I:L), with no confidentiality or availability effect.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the component Reverse Proxy. Performing a manipulation of the argument token results in open redirect. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
Exploit-DB