https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:48:23 +0000 https://vulnerability.circl.lu/vuln/cve-2026-32008 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authenticated users with browser-tool access to navigate to file:// URLs. Attackers can exploit this by accessing local files readable by the OpenClaw process user through browser snapshot and extraction actions to exfiltrate sensitive data.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.21 contain an improper URL scheme validation vulnerability in the assertBrowserNavigationAllowed() function that allows authenticated users with browser-tool access to navigate to file:// URLs. Attackers can exploit this by accessing local files readable by the OpenClaw process user through browser snapshot and extraction actions to exfiltrate sensitive data.</p> https://vulnerability.circl.lu/vuln/cve-2026-32008 https://vulnerability.circl.lu/vuln/ghsa-45cg-2683-gfmq <p><strong>Affected:</strong> npm: openclaw</p> <p>## Impact</p> <p>`assertBrowserNavigationAllowed()` validated only `http:`/`https:` network targets but implicitly allowed other schemes. An authenticated gateway user could navigate browser sessions to `file://` URLs and read local files via browser snapshot/extraction flows.</p> <p>## Affected Component</p> <p>- `src/browser/navigation-guard.ts`</p> <p>## Technical Reproduction</p> <p>1. Authenticate to a gateway that has browser tooling enabled. 2. Invoke browser navigation with a `file://` URL (for example `file:///etc/passwd`). 3. Read page content through browser snapshot/extract actions.</p> <p>## Demonstrated Impact</p> <p>An attacker with valid gateway credentials and browser-tool access can exfiltrate local files readable by the OpenClaw process user (for example config/secrets in that user context).</p> <p>## Environment</p> <p>- OpenClaw browser tool enabled - Attacker has authenticated access capable of invoking browser actions</p> <p>## Remediation Advice</p> <p>Reject unsupported navigation schemes and allow only explicitly safe non-network URLs. OpenClaw now blocks non-network schemes (such as `file:`, `data:`, and `javascript:`) while preserving `about:blank`.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.19-2` - Patched in planned next release: `2026.2.21`</p> <p>## Fix Commit(s)</p> <p>- `220bd95eff6838234e8b4b711f86d4565e16e401`</p> <p>## Release Process Note</p> <p>`patched_versions` is pre-set to the planned next release (`2026.2.21`) so once npm `2026.2.21` is published, the advisory can be pu…</p> <p><strong>Affected:</strong> npm: openclaw</p> <p>## Impact</p> <p>`assertBrowserNavigationAllowed()` validated only `http:`/`https:` network targets but implicitly allowed other schemes. An authenticated gateway user could navigate browser sessions to `file://` URLs and read local files via browser snapshot/extraction flows.</p> <p>## Affected Component</p> <p>- `src/browser/navigation-guard.ts`</p> <p>## Technical Reproduction</p> <p>1. Authenticate to a gateway that has browser tooling enabled. 2. Invoke browser navigation with a `file://` URL (for example `file:///etc/passwd`). 3. Read page content through browser snapshot/extract actions.</p> <p>## Demonstrated Impact</p> <p>An attacker with valid gateway credentials and browser-tool access can exfiltrate local files readable by the OpenClaw process user (for example config/secrets in that user context).</p> <p>## Environment</p> <p>- OpenClaw browser tool enabled - Attacker has authenticated access capable of invoking browser actions</p> <p>## Remediation Advice</p> <p>Reject unsupported navigation schemes and allow only explicitly safe non-network URLs. OpenClaw now blocks non-network schemes (such as `file:`, `data:`, and `javascript:`) while preserving `about:blank`.</p> <p>## Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected versions: `&lt;= 2026.2.19-2` - Patched in planned next release: `2026.2.21`</p> <p>## Fix Commit(s)</p> <p>- `220bd95eff6838234e8b4b711f86d4565e16e401`</p> <p>## Release Process Note</p> <p>`patched_versions` is pre-set to the planned next release (`2026.2.21`) so once npm `2026.2.21` is published, the advisory can be pu…</p> https://vulnerability.circl.lu/vuln/ghsa-45cg-2683-gfmq