OpenClaw SSRF Policy Bypass in Session Routes

OpenClaw before 2026.4.10 contains a server-side request forgery policy bypass vulnerability in existing-session browser interaction routes. Attackers can bypass SSRF navigation guards to interact with or navigate to unauthorized targets without policy enforcement.

Casky was already ahead

This CVE exploits attack patterns that Casky's 358matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

OpenClaw versions before 2.026.4.10 contain a server-side request forgery (SSRF) vulnerability that allows attackers to circumvent navigation security policies designed to restrict unauthorized access. The flaw exists in existing-session browser interaction routes, meaning attackers who have established or hijacked a session can leverage this bypass to interact with or navigate to internal resources, APIs, and services that should be blocked by SSRF protections. This affects any organization running vulnerable OpenClaw versions where user sessions are exposed to malicious actors, particularly those in environments where internal service discovery is a concern. The vulnerability is particularly dangerous because it defeats the layered defenses typically deployed against SSRF attacks, giving adversaries a foothold to perform lateral movement, data exfiltration, or reconnaissance of internal infrastructure.

Casky's 358 mapped security skills leverage Claude's extended reasoning to detect attack patterns associated with TA0004 (Privilege Escalation), TA0006 (Credential Access), and TA0001 (Initial Access). Practitioners using Casky would identify suspicious indicators such as: session-authenticated requests to unusual internal endpoints or private IP ranges that bypass expected SSRF guards (TA0004/TA0006 lateral movement patterns), abnormal navigation behavior within browser interaction routes that circumvent policy enforcement checkpoints, and HTTP request chains revealing policy bypass attempts targeting protected resources. The platform's skill correlation would surface that CWE-862 (Missing Authorization) and CWE-918 (Server-Side Request Forgery) co-occurrence points to authentication context being misused to bypass network policies—a signature of session-based SSRF exploitation. Security teams would receive findings highlighting which OpenClaw routes are vulnerable and what unauthorized resource access patterns to monitor for.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

358 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-43573.

analyzing-cloud-storage-access-patterns

cloud security · low

Run

analyzing-ios-app-security-with-objection

mobile security · low

Run

analyzing-kubernetes-audit-logs

container security · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006 TA0001

Investigate the attack patterns behind CVE-2026-43573

Casky has 358 skills that investigate the attack patterns behind CVE-2026-43573. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn