Listen to this Post
The vulnerability exists within OpenClaw’s SSRF (Server-Side Request Forgery) protection mechanism, specifically in the IP address classification logic within `src/shared/net/ip.ts` and src/infra/net/ssrf.. The guard is designed to block requests to internal or non-routable IP addresses, but it fails to correctly classify several IPv6 special-use ranges. Due to this oversight, addresses like IPv6 link-local (fe80::/10), unique local (fc00::/7), and documentation ranges (2001:db8::/32) were treated as public, routable addresses. An attacker who can control a URL fetched by the application can exploit this to target internal IPv6 services or non-routable infrastructure that should have been blocked. The flaw allows bypassing the intended network isolation, potentially leading to internal network scanning, service exploitation, or data exfiltration from internal IPv6 endpoints. The fix, implemented in commit d61f8e5672, adds these missing ranges to the blocked list, ensuring they are properly classified as non-public. The issue was reported by @nicky-cc of Tencent zhuque Lab.
DailyCVE Form:
Platform: OpenClaw
Version: <= 2026.3.24
Vulnerability: SSRF guard bypass
Severity: Low
date: Mar 31, 2026
Prediction: Apr 07, 2026
Analytics
What Undercode Say:
Check if a vulnerable version is in use
grep version package.json | grep 2026.3.24
Test classification of missing IPv6 ranges using a patched script
node -e "const { isPublicIp } = require('./src/shared/net/ip'); console.log(isPublicIp('fe80::1'));" Should return false in patched version
Exploit:
An attacker provides a URL pointing to a link-local IPv6 address (e.g., http://[fe80::1]:8080/internal`) which the vulnerable SSRF guard permits, allowing interaction with internal IPv6 hosts.d61f8e5672`. If patching is not immediate, manually enforce egress firewall rules to block outbound IPv6 requests to the specified special-use ranges.
<h2 style="color: blue;">Protection from this CVE:</h2>
Update to OpenClaw version 2026.3.28 or later, which includes commit
Impact:
Successful exploitation allows an attacker to bypass SSRF protections, potentially accessing internal IPv6 services, performing network reconnaissance on internal infrastructure, and reading sensitive data from otherwise unreachable endpoints.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
