Medium severity4.3NVD Advisory· Published Sep 14, 2026

CVE-2026-90818

Description

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the function OpenClawConfigSync.buildBrowserConfig of the file src/main/libs/openclawConfigSync.ts of the component Browser Network Configuration. The manipulation results in server-side request forgery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netease Youdao/Lobsteraireferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2026.6.15/2026.8.28/2026.9.3/2026.9.4

Patches

Vulnerability mechanics

References

gist.github.com/YLChen-007/e5f88777e7c50549fd98b23b2988f78dnvd
github.com/netease-youdao/LobsterAI/issues/2181nvd
vuldb.com/cve/CVE-2026-90818nvd
vuldb.com/submit/922881nvd
vuldb.com/vuln/403321nvd
vuldb.com/vuln/403321/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000