A server-side request forgery vulnerability in OpenClaw allows authenticated remote attackers to perform unauthorized network requests, potentially exposing internal infrastructure.

The software contains a server-side request forgery (SSRF) flaw within the marketplace plugin download feature. By exploiting unguarded fetch calls, an authenticated attacker with low privileges can force the server to interact with arbitrary internal or external network resources.

Successful exploitation of this vulnerability can lead to the exposure of internal services that are not typically accessible from the public internet. This could facilitate lateral movement, reconnaissance of internal network architecture, or interactions with cloud metadata services, which presents a significant risk to the integrity and confidentiality of the internal environment. The CVSS score of 7.6 reflects the potential for high impact on the internal network despite the requirement for low-level authentication.

Immediate Action: Upgrade the OpenClaw package to version 2026.3.31 or later to implement necessary input validation on the marketplace download functionality.

Proactive Monitoring: Monitor outbound network traffic from the application server for unusual connection attempts to sensitive internal IP ranges or unexpected external domains.

Compensating Controls: Implement strict egress filtering on the application server to prevent connections to unauthorized network segments and restrict the fetch functionality to allow-listed domains only.

Public Exploit Available: No

Given the potential for unauthorized access to internal resources, it is imperative that organizations prioritize updating their OpenClaw installation to version 2026.3.31. Administrators should verify the update has been applied successfully and review firewall egress rules to minimize the impact of potential future SSRF flaws.