A vulnerability categorized as critical has been discovered in OpenClaw up to 2026.4.11. This vulnerability affects unknown code of the component URL Handler. Such manipulation leads to server-side request forgery.
This vulnerability is documented as CVE-2026-43526. The attack can be executed remotely. There is not any exploit available.
It is advisable to upgrade the affected component.
