CVE-2026-35629CWE-918

OpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensions

Medium · published April 9, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. Attackers can exploit unprotected fetch() calls against configured endpoints to rebind requests to blocked internal destinations and access restricted resources.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-04-09T21:27Z
EPSS history
Timeline
  • 09 APR 21:27Z
    OpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel Extensions
    cvelistv5