Vulnerability Description
OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. Attackers can exploit unprotected fetch() calls against configured endpoints to rebind requests to blocked internal destinations and access restricted resources.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openclaw | Openclaw | < 2026.3.25 |
Related Weaknesses (CWE)
References
- https://github.com/openclaw/openclaw/commit/f92c92515bd439a71bd03eb1bc969c1964f1Patch
- https://github.com/openclaw/openclaw/security/advisories/GHSA-rhfg-j8jq-7v2hVendor Advisory
- https://www.vulncheck.com/advisories/openclaw-server-side-request-forgery-via-unThird Party Advisory
FAQ
What is CVE-2026-35629?
CVE-2026-35629 is a vulnerability with a CVSS score of 7.4 (HIGH). OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. Attackers can explo...
How severe is CVE-2026-35629?
CVE-2026-35629 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-35629?
Check the references section above for vendor advisories and patch information. Affected products include: Openclaw Openclaw.