A high-severity DNS rebinding vulnerability in the OpenClaw agent gateway enables unauthenticated attackers to perform unauthorized SSRF attacks against internal network infrastructure.

This is a Server-Side Request Forgery (SSRF) flaw occurring due to a check-then-use race condition during DNS resolution for CDP hostnames. An unauthenticated attacker can manipulate DNS responses to bypass security controls and force the gateway to communicate with internal or cloud-metadata services.

Successful exploitation allows an attacker to interact with internal services that are otherwise protected from the public internet. This can lead to the exfiltration of sensitive configuration data, cloud environment credentials, or unauthorized control over internal network segments. With a CVSS score of 8.2, this vulnerability represents a significant risk to the integrity and confidentiality of the host environment.

Immediate Action: Update the OpenClaw npm package to version 2026.8.1 or later to implement the corrected DNS validation logic.

Proactive Monitoring: Monitor outgoing network traffic from the OpenClaw gateway for unusual requests to private IP ranges or cloud metadata endpoints.

Compensating Controls: Disable the use of hostname-based remote CDP endpoints or restrict connections to strictly trusted, stable infrastructure until the patch can be applied.

Public Exploit Available: Unknown

Given the potential for unauthorized access to internal resources, organizations should prioritize updating the OpenClaw package to the latest version. If immediate patching is not feasible, the recommended mitigation of restricting hostname-based remote CDP endpoints must be implemented to prevent potential SSRF exploitation.