CVE-2026-112251Medium· 4.3▾ TwilightPoC availableA vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the component Reverse Proxy. Performing a manipulation of the argu…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 23.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.3%
A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the component Reverse Proxy. Performing a manipulation of the argument token results in open redirect. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
clawhost 0.0.1clawhost 0.0.2clawhost 0.0.3clawhost 0.0.4clawhost 0.0.5clawhost 0.0.6clawhost 0.0.7clawhost 0.0.8clawhost 0.0.9clawhost 0.0.10clawhost 0.0.11clawhost 0.0.12clawhost 0.0.13clawhost 0.0.14clawhost 0.0.15clawhost 0.0.16clawhost 0.0.17clawhost 0.0.18clawhost 0.0.19clawhost 0.0.20clawhost 0.0.21clawhost 0.0.22clawhost 0.0.23clawhost 0.0.24clawhost 0.0.25clawhost 0.0.26clawhost 0.0.27clawhost 0.0.28clawhost 0.0.29clawhost 0.0.30clawhost 0.0.31clawhost 0.0.32clawhost 0.0.33clawhost 0.0.34clawhost 0.0.35clawhost 0.0.36clawhost 0.0.37clawhost 0.0.38clawhost 0.0.39clawhost 0.0.40clawhost 0.0.41clawhost 0.0.42clawhost 0.0.43clawhost 0.0.44clawhost 0.0.45Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-115537Medium· 4.3gedelumbung HospitalManagement URL Validation routing_pages.php simpan redirect
CVE-2026-112040Medium· 4.3diem-project diem Sign-In BasedmUserActions.class.php redirect
CVE-2026-112034Medium· 4.3aircheng-org iWebShop-5 Login Redirect _userInfo.php redirect
CVE-2026-111622Medium· 6.8smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unvalidated redirectUri parameter
CVE-2026-111385Medium· 4.8Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer Tools
CVE-2026-55840Medium· 5.4Scoold is a Q&A and a knowledge sharing platform for teams