An unauthenticated server-side request forgery vulnerability in the OpenClaw Zalo plugin allows attackers to access internal network resources.

This flaw is a Server-Side Request Forgery (CWE-918) within the Zalo plugin's sendPhoto function, which fails to properly validate outbound photo URLs against the SSRF protection mechanism. The vulnerability can be exploited by an unauthenticated attacker over the network with low attack complexity.

A successful exploit allows malicious actors to query internal services and infrastructure that are normally shielded from external networks, potentially exposing sensitive internal data or administrative interfaces. Given the CVSS score of 8.6, this high severity vulnerability poses a significant risk to organizational confidentiality and internal network segregation.

Immediate Action: Update the OpenClaw package to version 2026.4.22 or later via npm.

Proactive Monitoring: Monitor network traffic for unusual outbound requests originating from the server hosting OpenClaw, specifically targeting internal IP ranges or cloud metadata endpoints.

Compensating Controls: Implement strict egress filtering and network segmentation to restrict outbound connections from the application server to internal resources.

Public Exploit Available: No

Security teams must treat this high severity vulnerability with urgency, coordinating immediately with development staff to update the affected npm package. Ensuring proper URL validation and egress rules will effectively mitigate the underlying risk of unauthorized internal resource access.