Executive brief
OpenClaw is a web infrastructure library used to handle network requests and enforce security controls. This vulnerability allows attackers to bypass the SSRF (Server-Side Request Forgery) protection by using a specially formatted IPv6 address that conceals a private or loopback IPv4 address, potentially enabling unauthorized access to internal systems or cloud metadata services.
Technical details
OpenClaw's SSRF guard (src/infra/net/ssrf.ts) failed to properly detect private IPv4 addresses when encoded as full-form IPv4-mapped IPv6 literals (e.g., 0:0:0:0:0:ffff:7f00:1 representing 127.0.0.1). The vulnerable component's IP classification logic did not consistently handle this IPv6 notation, allowing requests to loopback, private networks, and link-local metadata endpoints to bypass intended security restrictions. An attacker can craft a malicious URL using this IPv6 format and make requests that should have been blocked by the SSRF guard. The vulnerability requires no authentication and can be exploited over the network. A fix has been released in version 2026.2.14 (commit c0c0e0f9aecb913e738742f73e091f2f72d39a19).
Affected products
- OpenClaw OpenClaw <= 2026.2.13
Timeline
- 2026-02-15: disclosed
- 2026-02-17: advisory
- 2026-02-14: patched: Patched version 2026.2.14 (planned release)