Server-Side Request Forgery (SSRF) in OpenClaw - #VU135911
Published: June 30, 2026
Vulnerability identifier: #VU135911
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to access network destinations that should have been blocked by OpenClaw policy.
The vulnerability exists due to server-side request forgery (SSRF) in browser snapshot routes when processing post-navigation requests. A remote user can supply a crafted input path to access network destinations that should have been blocked by OpenClaw policy.
Only instances with the affected feature enabled and reachable are vulnerable, and practical impact depends on whether lower-trust input can reach that path.
Affected software
OpenClaw
Remediation
Install security update from vendor's website.
OpenClaw - update to 2026.5.26