Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-90818

LobsterAI · Vulnerability

CVSS 4.0 5.3 MEDIUMCVSS 3.1 4.3 MEDIUMCVSS 3.0 4.3 MEDIUMCVSS 2.0 5.0 Check source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-90818

Published

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of the file src/main/libs/openclawConfigSync.ts of the component Browser Network Configuration. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-90818

Published

LobsterAI

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "netease-youdao",
                    "product": "LobsterAI",
                    "versions": [
                        {
                            "version": "2026.6.15",
                            "status": "affected"
                        },
                        {
                            "version": "2026.8.28",
                            "status": "affected"
                        },
                        {
                            "version": "2026.9.3",
                            "status": "affected"
                        },
                        {
                            "version": "2026.9.4",
                            "status": "affected"
                        }
                    ],
                    "cpes": [
                        "cpe:2.3:a:netease-youdao:lobsterai:*:*:*:*:*:*:*:*"
                    ],
                    "modules": [
                        "Browser Network Configuration"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON