CVE-2026-32913 in OpenClaw
요약 (영어)
OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attackers can trigger redirects to different origins to intercept sensitive headers like X-Api-Key and Private-Token intended for the original destination.
책임이 있는
VulnCheck
예약하다
2026. 03. 16.
공개
2026. 03. 24.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 352650 | OpenClaw Header Validation 정보 공개 | 522 | 정의되지 않음 | 공식 수정 | CVE-2026-32913 |