A server-side request forgery vulnerability in OpenClaw allows authenticated attackers to perform unauthorized requests against internal and private network infrastructure.

The application suffers from a Server-Side Request Forgery (CWE-918) within the web search citation redirect resolution process. An authenticated attacker can manipulate redirect targets to force the host to issue requests to internal, loopback, or private network destinations.

The ability to perform SSRF attacks poses a significant risk to internal network security. By bypassing perimeter defenses, an attacker can access sensitive internal services, metadata endpoints, or administrative interfaces that are not intended to be exposed to the public internet, potentially leading to data exfiltration or internal service disruption. Given the CVSS score of 7.4, this vulnerability is classified as High severity and requires prompt attention.

Immediate Action: Update the OpenClaw package to version 2026.3.1 or later as specified in the official repository.

Proactive Monitoring: Review web server and application access logs for unusual outgoing requests or patterns indicative of scanning internal network segments.

Compensating Controls: Implement strict egress filtering on the host machine to prevent the application from making connections to internal IP ranges or sensitive loopback services.

Public Exploit Available: Unknown

This vulnerability presents a high risk to the confidentiality and integrity of internal network resources. Administrators should prioritize updating the OpenClaw software to version 2026.3.1 immediately to resolve the SSRF flaw. Failure to patch may allow unauthorized actors to leverage the application as a proxy for targeting internal infrastructure.