CVE-2026-100576
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Sep 26, 2026
Vendor
unknown
Description
OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or private destinations without navigation checks applied to other browser actions.