What’s Vulnerable › Vulnerabilities

CVE-2026-112251: antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-19 · updated 2026-10-19
• Weakness: CWE-601

Description

A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the component Reverse Proxy. Performing a manipulation of the argument token results in open redirect. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• antoinersx clawhost: 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.0.5, 0.0.6 (+39)

References

• https://drive.google.com/drive/folders/1fvX6wjfHd58SzCAZd5-4Zn-mh9jqx8mz?usp=drive_link
• https://vuldb.com/cve/CVE-2026-112251
• https://vuldb.com/submit/986376
• https://vuldb.com/vuln/422332
• https://vuldb.com/vuln/422332/cti

Get alerted when CVE-2026-112251 or the next vulnerability affects your stack