CVE-2026-42436

Description

OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://github.com/openclaw/openclaw/commit/b75ad800a59009fc47eaa3471410f69046150e59
• https://github.com/openclaw/openclaw/security/advisories/GHSA-c4qm-58hj-j6pj
• https://www.vulncheck.com/advisories/openclaw-internal-page-content-exposure-via-browser-snapshot-and-screenshot-routes
• https://nvd.nist.gov/vuln/detail/CVE-2026-42436
• https://github.com/openclaw/openclaw/pull/66040
• https://github.com/openclaw/openclaw
• https://github.com/advisories/GHSA-c4qm-58hj-j6pj

CWEs

CWE-862