CVE-2026-112251 antoinersx CVE debrief

Who should care

Defenders responsible for antoinersx clawhost deployments should assess exposure and prioritize patching or mitigation to prevent open redirect attacks. This includes verifying affected versions, applying patches or mitigations, and monitoring the affected system for potential security incidents. Security teams should review compensating controls for exposed systems while remediation is scheduled and verified.

Why it matters

CVE-2026-112251 is a medium-severity vulnerability in antoinersx clawhost that allows open redirect attacks. Defenders should prioritize verifying affected versions and applying patches to prevent security incidents.

• Open redirect attacks can lead to phishing or malware campaigns.
• Successful exploitation may allow attackers to redirect users to malicious websites.
• Defenders should verify affected versions and apply patches to prevent exploitation.
• Remediation priority is medium due to the potential for security incidents.

Technical summary

The vulnerability affects the handleRequest function in the reverseProxy.ts file of the antoinersx clawhost component. An attacker can manipulate the token argument to perform an open redirect attack. The attack can be initiated remotely. The exploit is now public and may be used. Defenders should prioritize verifying affected versions and applying patches or mitigations to prevent open redirect attacks. The CVE record and source item provide details about the vulnerability, including its description, affected versions, and potential impact.

Defensive priority

Defenders should prioritize verifying the affected versions of antoinersx clawhost and applying patches or mitigations to prevent open redirect attacks.

Recommended defensive actions

• Verify the version of antoinersx clawhost and check if it is within the affected range (up to 0.0.45).
• Apply patches or mitigations provided by the vendor to prevent open redirect attacks.
• Monitor the affected system for potential security incidents.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details about the vulnerability, including its description, affected versions, and potential impact. The vulnerability affects the handleRequest function in the reverseProxy.ts file of the antoinersx clawhost component. An attacker can manipulate the token argument to perform an open redirect attack. The attack can be initiated remotely. The exploit is now public and may be used. Defenders should assess exposure and prioritize patching or mitigation to prevent open redirect attacks. The vendor's

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.