A server-side request forgery vulnerability in OpenClaw allows authenticated attackers to access sensitive internal network resources by manipulating marketplace plugin download redirects.

The vulnerability exists within the marketplace.ts module, which fails to restrict redirect destinations when processing archive downloads. This Server-Side Request Forgery (SSRF) flaw allows an authenticated attacker with low privileges to force the server to send requests to arbitrary internal or external targets.

The ability to perform SSRF allows attackers to bypass network perimeters, potentially exposing internal services that are not intended for public access. Given the CVSS score of 7.6, this represents a significant risk of internal data exposure or reconnaissance, which could facilitate further attacks against the organization's infrastructure.

Immediate Action: Update the OpenClaw package to version 2026.3.31 or later to implement proper redirect validation.

Proactive Monitoring: Audit server access logs and outbound network traffic originating from the application server for unexpected connections to internal IP addresses or sensitive endpoints.

Compensating Controls: Implement strict egress filtering on the application server to prevent connections to internal network segments, effectively limiting the scope of potential SSRF abuse.

Public Exploit Available: No (exploit_available: unknown)

Organizations utilizing OpenClaw must prioritize updating to version 2026.3.31 to remediate this SSRF vulnerability. Failure to patch leaves the internal network exposed to unauthorized discovery and potential data access by authenticated users.