Executive brief
OpenClaw is a plugin and model management system used to extend application capabilities with third-party plugins and machine learning models. An attacker with user credentials can exploit an unguarded download function to make the server fetch files from internal or otherwise restricted network locations, potentially exposing sensitive data or internal services. This requires authentication and user interaction but poses a meaningful risk to internal infrastructure.
Technical details
The vulnerability is a Server-Side Request Forgery (CWE-918) in the Marketplace Plugin Download functionality, where the `fetch()` function does not properly validate or restrict the target URLs. An authenticated attacker can craft a malicious URL in the marketplace download process to redirect the server fetch to internal services, file shares, or other network-accessible resources. The attack requires valid user credentials and some user interaction but does not require network traversal. Exploitation allows reading content from restricted network locations. The vulnerability is patched in version 2026.3.31 and later.
Affected products
- OpenClaw openclaw <=2026.3.28
Timeline
- 2026-04-02: disclosed
- 2026-03-30: patched: Fix committed; patched version 2026.3.31 released
- 2026-04-21: other: NVD published CVE-2026-41302