Executive brief
OpenClaw is an open-source platform used for managing communication channels and extensions. A security flaw in several of its extensions (including BlueBubbles, Mattermost, and Nextcloud Talk) allows an attacker to force the server to make unauthorized requests to internal network resources. This could lead to the exposure of sensitive internal data or unauthorized access to private services that are not intended to be reachable from the internet.
Technical details
OpenClaw versions prior to 2026.3.25 are vulnerable to Server-Side Request Forgery (SSRF) within several channel extensions, including BlueBubbles, Mattermost, Nextcloud Talk, and Thread Ownership. The vulnerability arises because these extensions used raw fetch() calls against user-configured base URLs without utilizing the fetchWithSsrFGuard protection mechanism introduced in a previous fix. An attacker with low privileges can configure these endpoints to point to internal IP addresses or use DNS rebinding to bypass network restrictions. This allows the attacker to probe internal network services or access restricted metadata. The issue is resolved in version 2026.3.25 by routing outbound requests through the fetchWithSsrFGuard layer, which implements DNS pinning and network policy enforcement.
Affected products
- OpenClaw openclaw < 2026.3.25
Timeline
- 2026-03-26: patched: Fix committed to main branch
- 2026-04-09: advisory: NVD publication date
- 2026-04-10: disclosed: GitHub Advisory published