GitHub Advisoryadvisory · npm
GHSA-f7fh-qg34-x2xh OpenClaw: CDP /json/version WebSocket URL could pivot to untrusted second-hop targets
MEDIUM
Official page ↗
- Aliases
- CVE-2026-43576
- Ecosystem
- npm
- Packages
- openclaw
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- CWE-601, CWE-918
- Reviewed
- 2026-04-17
Affected packages
• npm openclaw: < 2026.4.5 → fixed in 2026.4.5
Description
Summary
CDP /json/version WebSocket URL could pivot to untrusted second-hop targets.
Affected Packages / Versions
• Package: `openclaw`
• Ecosystem: npm
• Affected versions: `= 2026.4.5`
Impact
A browser profile could trust a CDP `/json/version` response whose `webSocketDebuggerUrl` pointed at a different host, enabling a second-hop SSRF-style pivot.
Technical Details
The fix normalizes and re-validates direct CDP WebSocket targets before connecting.
Fix
The issue was fixed in #60469. The first stable tag containing the fix is `v2026.4.5`, and `[email protected]` includes the fix.
Fix Commit(s)
• `bc356cc8c2beaa747c71dd86cceab8f804699665`
• PR: #60469
Release Process Note
Users should upgrade to `openclaw` 2026.4.5 or newer. The latest npm release, `2026.4.14`, already includes the fix.
Credits
Thanks to @tdjackey for reporting this issue.
Related
Alias · CVE (1)
- CVE-2026-43576 OpenClaw before 2026.4.5 contains a server-side request forgery vulnerability in the CDP /json/version WebSocket endpoint that allows… vulnerability
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-f7fh-qg34-x2xh web
- https://nvd.nist.gov/vuln/detail/CVE-2026-43576 advisory
- https://github.com/openclaw/openclaw/pull/60469 web
- https://github.com/openclaw/openclaw/commit/bc356cc8c2beaa747c71dd86cceab8f804699665 web
- https://github.com/openclaw/openclaw package
- https://www.vulncheck.com/advisories/openclaw-second-hop-ssrf-via-cdp-json-version-websocket-url web