CVE-2026-41372 in OpenClawИнформация

Сводка

по MITRE • 28.04.2026

OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections. Attackers can craft hostile discovery responses returning localhost. to retarget authenticated browser control toward localhost endpoints and expose browser state.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Ответственный

VulnCheck

Резервировать

20.04.2026

Раскрытие

28.04.2026

Модерация

принято

Вход

VDB-359903

EPSS

0.00042

KEV

Нет

Деятельности

Очень низкий

Сектор

Police, Lawfirm, ...

Источники

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-41372
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41372
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-41372/

◂ ПредыдущийОбзорДалее ▸

Interested in the pricing of exploits?

See the underground prices here!