Threats tagged 'ghsa-c4qm-58hj-j6pj'

OpenClaw versions prior to 2026.4.14 contain a vulnerability where browser snapshot and screenshot routes could expose internal page content after navigation. Authenticated users could exploit this by accessing snapshot, screenshot, or tab routes that did not properly validate the final browser target, potentially exposing content from internal or restricted pages. This issue was fixed in version 2026.4.14.