CVE-2026-32913 in OpenClaw정보

요약 (영어)

OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attackers can trigger redirects to different origins to intercept sensitive headers like X-Api-Key and Private-Token intended for the original destination.

책임이 있는

VulnCheck

예약하다

2026. 03. 16.

공개

2026. 03. 24.

엔트리

VulDB provides additional information and datapoints for this CVE:

Interested in the pricing of exploits?

See the underground prices here!