Which versions of OpenClaw are affected by CVE-2026-42439?

OpenClaw npm package versions before 2026.4.10 contain an SSRF policy bypass vulnerability that allows authenticated users to manipulate browser tab navigation, potentially enabling unauthorized…. A patch is available.

How to fix or mitigate CVE-2026-42439?

Within 24 hours: Identify all systems running OpenClaw versions prior to 2026.4.10 using dependency scanning tools. Within 7 days: Update OpenClaw to version 2026.4.10 across all development, staging, and production environments; verify the patch through GitHub advisory GHSA-rj2p-j66c-mgqh (commit 48c0347). Within 30 days: Conduct access log review for the /tabs/action endpoint to detect any suspicious tab navigation activity during the vulnerability window; implement network segmentation if internal resources were previously accessible through this vector.

OpenClaw CVE-2026-42439

Q: What is the CVSS score of CVE-2026-42439?

CVE-2026-42439 has a CVSS 4.0 base score of 4.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-27261 MEDIUM

Missing Authorization (CWE-862)

2026-05-05 VulnCheck

Authentication Bypass SSRF Openclaw

4.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

4.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

May 05, 2026 - 12:37 NVD

HIGH MEDIUM

CVSS changed

May 05, 2026 - 12:37 NVD

8.5 (HIGH) 4.9 (MEDIUM)

Source Code Evidence Fetched

May 05, 2026 - 12:17 vuln.today

Analysis Generated

May 05, 2026 - 12:17 vuln.today

DescriptionCVE.org

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in the browser tabs action select and close routes. Attackers can bypass configured browser SSRF policy protections by exploiting the /tabs/action endpoint to perform unauthorized tab navigation operations.

AnalysisAI

Server-side request forgery (SSRF) policy bypass in OpenClaw npm package allows authenticated remote attackers to perform unauthorized browser tab navigation operations, circumventing configured SSRF protections through the /tabs/action endpoint. OpenClaw versions before 2026.4.10 are affected. Vendor-released patch version 2026.4.10 is available (confirmed by GitHub advisory GHSA-rj2p-j66c-mgqh and commit 48c0347). No public exploit identified at time of analysis, though EPSS data not available. The CVSS score of 8.5 with scope change (S:C) indicates potential for significant cross-boundary impact despite requiring low-privilege authentication.

Technical ContextAI

OpenClaw is an npm package providing browser automation capabilities with built-in SSRF (Server-Side Request Forgery) policy controls designed to restrict unauthorized navigation and resource access. The vulnerability stems from CWE-862 (Missing Authorization), specifically affecting the /tabs/action endpoint's select and close route handlers. These handlers failed to enforce the configured browser SSRF policy before performing tab operations, creating an authorization gap. SSRF policies typically restrict which URLs or resources browser automation tools can access to prevent attackers from using the server as a proxy to access internal resources, cloud metadata endpoints, or other restricted targets. The affected package is distributed through npm as 'openclaw', with the vulnerability present in all versions prior to 2026.4.10 according to CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*.

RemediationAI

Upgrade OpenClaw to version 2026.4.10 or later; the latest stable release 2026.4.14 available via npm includes the fix (npm install openclaw@latest or npm install openclaw@2026.4.14). The fix enforces browser SSRF policy checks in the select and close branches of the /tabs/action endpoint, implemented in pull request #63332 and commit 48c0347921b7e9438af0312968fc360ca88023f3 (patch details at https://github.com/openclaw/openclaw/commit/48c0347921b7e9438af0312968fc360ca88023f3). For environments unable to immediately upgrade, implement compensating controls by restricting network access to the /tabs/action endpoint through reverse proxy or web application firewall rules to only trusted authenticated users, and enable comprehensive logging of all /tabs/action requests to detect potential abuse attempts; however, this workaround does not eliminate the policy bypass and should be considered temporary only. Review existing SSRF policy configurations to ensure they align with security requirements, as the vulnerability may have allowed past policy violations. Consult the vendor advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-rj2p-j66c-mgqh for complete remediation guidance.