OpenClaw before 2026.4.10 contains an incomplete navigation guard vulnerability that allows attackers to trigger navigation without complete SSRF policy enforce…

OpenClaw versions before 2026.4.10 contain an incomplete navigation guard vulnerability (CVE-2026-43580) that allows attackers to bypass SSRF policy enforcement. The vulnerability specifically affects browser press/type style interactions, including pressKey and type submit flows, which can bypass post-action security checks. This enables attackers to execute unauthorized navigation actions without proper security validation. The vulnerability has been addressed in version 2026.4.10 with multiple commits providing fixes and security improvements.