Private-network content disclosure via unchecked act navigation

SSRF in OpenClaw browser control before 2026.5.18 allows remote authenticated users to read private-network page content. Playwright act interactions can navigate an attacker-controlled page to a private or loopback URL after the initial destination check, and browser evaluation then reads the reached page. Exploitation requires enabled browser control, an authenticated caller, an attacker-controlled page, and evaluation capability; it exposes page content but does not alter or interrupt private services.