CVE-2026-17458 in openclaw-cn
Summary
by MITRE • 07/26/2026
A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 07/27/2026
This vulnerability resides within the mf-yang openclaw-cn software version 0.2.1 and earlier, specifically targeting the Browser Control HTTP API component. The flaw exists in the clickViaPlaywright function located within src/browser/routes/agent.act.ts file, representing a critical security weakness that enables server-side request forgery attacks. The vulnerability manifests when malicious input is processed through the browser control interface, allowing an attacker to manipulate the system's behavior and potentially access unauthorized resources.
The technical implementation of this flaw involves improper validation of user-supplied parameters within the clickViaPlaywright function, which operates as part of the HTTP API layer for browser automation control. When a remote attacker submits crafted input to this endpoint, the system fails to properly sanitize or validate the data before processing it through the Playwright automation framework. This oversight creates an attack vector where malicious requests can be executed on behalf of the server, effectively bypassing normal access controls and potentially enabling unauthorized network communications.
The operational impact of this vulnerability extends beyond simple privilege escalation, as it allows for potential lateral movement within networks and information disclosure. An attacker could leverage this vulnerability to perform reconnaissance activities against internal systems that are not directly exposed to the internet, effectively using the compromised server as a pivot point for further attacks. The public availability of exploit code significantly increases the risk profile, as it removes the requirement for sophisticated attack development and allows less skilled threat actors to potentially compromise affected systems.
The security implications align with CWE-918, which addresses server-side request forgery vulnerabilities where applications fail to properly validate or sanitize external input before making network requests. This weakness falls under the broader category of insecure direct object references and improper input validation issues that have been consistently identified as critical threats in industry security frameworks. The ATT&CK framework would classify this vulnerability under T1190 for exploit public-facing application and potentially T1071 for application layer protocol usage, depending on how the attack chain is executed.
Mitigation strategies should include immediate implementation of input validation controls within the clickViaPlaywright function to prevent malicious parameter injection, followed by network segmentation to limit access to the affected API endpoints. Organizations should also implement proper authentication and authorization controls around the browser control functionality, along with monitoring for unusual patterns in HTTP requests that might indicate exploitation attempts. The most effective long-term solution involves updating to a patched version of the mf-yang openclaw-cn software, as the vendor has been made aware of the issue but has not yet provided a response or fix, leaving affected systems vulnerable to active exploitation.