An SSRF protection bypass vulnerability in OpenClaw allows authenticated attackers to potentially reach internal network resources via maliciously crafted IPv6 addresses.

The software fails to implement a complete blocklist for IPv6 special-use ranges within its SSRF protection mechanism. By leveraging this flaw, an authenticated attacker can perform server-side request forgery to interact with restricted internal or non-routable IPv6 endpoints.

This vulnerability poses a significant risk to internal network segmentation and data confidentiality. Successful exploitation allows an attacker to bypass security perimeters, potentially exposing sensitive internal services or metadata endpoints that are not intended for public access. Given the CVSS score of 7.1, this is classified as a High-severity issue that requires prompt remediation to prevent unauthorized internal reconnaissance.

Immediate Action: Update the OpenClaw package to version 2026.3.28 or later to incorporate the expanded IPv6 address filtering.

Proactive Monitoring: Review application logs for suspicious outbound requests, particularly those involving IPv6 addresses or unexpected internal network scanning patterns.

Compensating Controls: Deploy or update Web Application Firewall rules to strictly filter and validate all URL inputs, specifically blocking traffic directed toward IPv6 special-use or loopback addresses.

Public Exploit Available: No

The vulnerability represents a clear path for internal network discovery and potential exploitation of secondary services. Administrators should prioritize the update to version 2026.3.28 during the next maintenance cycle. Given the nature of SSRF, failing to patch this flaw leaves the underlying infrastructure vulnerable to lateral movement and unauthorized internal service interaction.