Executive brief
OpenClaw is a user-controlled local assistant that includes a function called fetchWithSsrFGuard to handle web requests securely. A vulnerability allows this function to resend sensitive request bodies and headers to unintended cross-origin sites when following redirects, potentially exposing authentication credentials or other sensitive data. An attacker can exploit this by triggering redirects to exfiltrate confidential information to malicious domains.
Technical details
The vulnerability is a request body replay issue in the fetchWithSsrFGuard function that fails to properly sanitize or block unsafe request bodies when processing cross-origin redirects. The vulnerable component accepts POST/PUT/PATCH requests with sensitive payloads and, when a redirect response is received, replays the original request body to the new cross-origin destination without validation. This is a violation of HTTP security semantics and the same-origin policy. An attacker with the ability to trigger or control redirect targets can craft scenarios to exfiltrate confidential request data. The fix was implemented in commit d7c3210cd6f5fdfdc1beff4c9541673e814354d5 and released in version 2026.4.8.
Affected products
- OpenClaw OpenClaw before 2026.3.31; fixed in 2026.4.8
Timeline
- 2026-04-08: disclosed
- 2026-04-08: patched: Fixed in version 2026.4.8