Executive brief
OpenClaw is a browser security library that validates which hostnames a browser can access in order to prevent Server-Side Request Forgery (SSRF) attacks. An attacker can bypass this validation through DNS rebinding—a technique where a domain initially resolves to a harmless IP but later resolves to an internal network address—allowing unauthorized access to internal systems. The vulnerability affects versions before 2026.4.10 and has been patched in version 2026.4.10 and later.
Technical details
This vulnerability is a hostname validation bypass that enables DNS rebinding-style SSRF attacks (CWE-918, CWE-350). The root cause is that OpenClaw's browser navigation policy performs hostname/IP validation at one point in time, but the actual network resolution may differ by the time Chromium attempts the connection, allowing an attacker to pivot to internal addresses. The vulnerability requires network access and some level of attacker control over DNS responses, but no authenticated user interaction is needed. An attacker can exploit this to access internal network resources that should be blocked by the allowlist policy. The fix (PR #64367, commit 121c452d666d4749744dc2089287d0227aae2ed3) tightens hostname validation to ensure unallowlisted hostnames fail closed under restrictive policy, and the patch is available in versions ≥ 2026.4.10.
Affected products
- OpenClaw OpenClaw < 2026.4.10
Timeline
- 2026-04-17: disclosed: GHSA-xq94-r468-qwgj published
- 2026-04-17: patched: Fix released in OpenClaw 2026.4.10 (also in 2026.4.14)