A critical server-side request forgery vulnerability in OpenClaw allows unauthenticated attackers to exfiltrate internal service data by manipulating image download requests.

The application contains a server-side request forgery (SSRF) flaw within the image-generation-provider.ts component. An unauthenticated attacker can leverage this to force the server to fetch arbitrary internal URLs, potentially exposing sensitive metadata or internal service responses.

This vulnerability poses a significant risk to internal network security by allowing attackers to bypass perimeter defenses and interact with private services. Successfully exploiting this flaw could lead to the unauthorized disclosure of internal configuration data or service responses, which may facilitate further attacks on the internal infrastructure. With a CVSS score of 8.3, this issue is classified as high severity, requiring prompt attention to prevent potential data compromise.

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the vendor-supplied fix.

Proactive Monitoring: Monitor network traffic and server logs for unusual outbound requests originating from the image-generation-provider component, particularly those targeting internal IP addresses or private service endpoints.

Compensating Controls: Implement strict egress filtering on the server to restrict outbound connections to only authorized external domains, preventing the application from reaching internal resources.

Public Exploit Available: Unknown

Given the ability for an unauthenticated attacker to probe internal network services, this vulnerability represents a high risk to organizational security. IT administrators should prioritize upgrading to version 2026.3.28 immediately. If an immediate update is not feasible, implement robust egress filtering to block unauthorized internal requests and reduce the attack surface until the remediation can be applied.