CVE-2026-32913 in OpenClaw
Сводка (Английский)
OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects. Attackers can trigger redirects to different origins to intercept sensitive headers like X-Api-Key and Private-Token intended for the original destination.
Ответственный
VulnCheck
Резервировать
16.03.2026
Раскрытие
24.03.2026
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 352650 | OpenClaw Header Validation раскрытие информации | 522 | Не определено | Официальное исправление | CVE-2026-32913 |