# CVE-2026-100601: ClawHub server-side request forgery in profile image preview

Source: https://junglewise.ai/threats/cve-2026-100601-clawhub-openclaw-clawhub-application-backend-contains-a-server  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-26. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-100601 · Severity: medium · CVSS 5.3 · Published 2026-09-26

ClawHub is a collaborative development platform used to manage code projects and profiles. The public profile preview feature fetches user-provided image URLs but does not properly validate that the resolved destination is actually a public address, allowing attackers to direct it toward internal systems through DNS rebinding attacks. While a proof-of-concept only demonstrated outbound connections to attacker-controlled addresses, this could enable access to internal services or credential theft.

Technologies: [Openclaw ClawHub](https://junglewise.ai/threats/technologies/clawhub). Vendors: [Openclaw](https://junglewise.ai/threats/vendors/openclaw).

## Quick answers

**Is CVE-2026-100601 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-100601 being exploited in the wild.

**How severe is CVE-2026-100601?** Medium severity, with a CVSS score of 5.3, published 26 September 2026.

**Which products and versions are affected?** Openclaw ClawHub before revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650.

**Is there a fix for CVE-2026-100601?** A patch was published on 2026-09-11: Deployed to clawhub.ai in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650; self-hosted deployments should update to this revision or later Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-100601 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-100601?** Check whether you run Openclaw ClawHub at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

ClawHub's profile preview image fetching validates the textual hostname against private-address patterns (CWE-918) but fails to pin the resolved network destination, enabling DNS rebinding attacks where a public-looking hostname resolves to an internal address or changes between validation and connection. Network-accessible; no authentication or user interaction required for exploitation beyond providing a crafted URL. A maintainer-controlled local harness confirmed outbound connections to private addresses; production impact assessment did not test access to internal services or credentials.

## Affected products

- OpenClaw ClawHub before revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650

## Timeline

- 2026-09-11: disclosed
- 2026-09-11: patched: Deployed to clawhub.ai in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650; self-hosted deployments should update to this revision or later

## References

- [https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650](https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650)
- [https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm](https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm)

## Related threats

- [ClawHub incorrect authorization in organization skill transfer](https://junglewise.ai/threats/cve-2026-100604-clawhub-openclaw-clawhub-contains-an-incorrect-authorization)
- [ClawHub application backend authorization bypass in skill report moderation](https://junglewise.ai/threats/cve-2026-100603-clawhub-openclaw-clawhub-application-backend-contains-a-flaw-in)
- [ClawHub missing authorization check in changelog preview](https://junglewise.ai/threats/cve-2026-100602-clawhub-openclaw-clawhub-application-backend-contains-a-missing)
- [ClawHub anonymous API quota exhaustion and identity spoofing](https://junglewise.ai/threats/cve-2026-100600-clawhub-the-openclaw-clawhub-application-backend-does-not-bind)