CVE-2026-35629

7.4 HIGH
Published: April 09, 2026 Modified: April 13, 2026
View on NVD

Description

OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. Attackers can exploit unprotected fetch() calls against configured endpoints to rebind requests to blocked internal destinations and access restricted resources.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://github.com/openclaw/openclaw/commit/f92c92515bd439a71bd03eb1bc969c1964f17acf
Source: disclosure@vulncheck.com
https://github.com/openclaw/openclaw/security/advisories/GHSA-rhfg-j8jq-7v2h
Source: disclosure@vulncheck.com
https://www.vulncheck.com/advisories/openclaw-server-side-request-forgery-via-unguarded-configured-base-urls-in-channel-extensions
Source: disclosure@vulncheck.com

3 reference(s) from NVD

Quick Stats

CVSS v3 Score
7.4 / 10.0
EPSS (Exploit Probability)
0.0%
10th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-918

Related CVEs

CVE-2026-34161 N/A
CVE-2026-34160 8.6
CVE-2026-33715 7.2
CVE-2026-33714 N/A
CVE-2026-27287 7.8