OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforce…

OpenClaw versions before 2026.4.10 contain an incomplete navigation guard vulnerability that enables attackers to bypass SSRF policy enforcement. The vulnerability allows unauthorized navigation through browser interactions like pressKey and type submit flows. Attackers can exploit browser press/type style interactions to circumvent post-action security checks. This creates a pathway for unauthorized navigation execution without proper security validation. The vulnerability affects the core navigation security mechanisms in OpenClaw applications.