CVE-2026-32037

Low CVSS: 2.3

OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls.

Vendor

Openclaw

Product

Openclaw

CWE

CWE-918

Yayın Tarihi

2026-03-19 22:16:39

Güncelleme

2026-03-23 17:15:11

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-918 Openclaw LOW Openclaw 2026

Referanslar

https://github.com/openclaw/openclaw/commit/73d93dee64127a26f1acd09d0403b794cdeb4f5c https://github.com/openclaw/openclaw/commit/b34097f62df9d1960cc22600269cd3f3284e2124 https://github.com/openclaw/openclaw/security/advisories/GHSA-w76h-8m22-hpgh https://www.vulncheck.com/advisories/openclaw-redirect-chain-bypass-of-media-host-allowlist-in-msteams-attachment-handling

Benzer Kayıtlar

Medium

CVE-2026-34426

OpenClaw versions prior to commit b57b680 contain an approval bypass vulnerability due to inconsistent environment varia…

Medium

CVE-2026-34510

OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file…

High

CVE-2026-34503

OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked.…

Medium

CVE-2026-34504

OpenClaw before 2026.3.28 contains a server-side request forgery vulnerability in the fal provider image-generation-prov…

Medium

CVE-2026-33580

OpenClaw before 2026.3.28 contains a missing rate limiting vulnerability in the Nextcloud Talk webhook authentication th…

High

CVE-2026-33581

OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbi…