OpenClaw SSRF via DNS rebinding in hostname validation

Executive brief

OpenClaw, a browser-related library, is vulnerable to a security bypass that could allow attackers to access internal network resources. By using a technique called DNS rebinding, an attacker can trick the software into connecting to private servers or services that should be protected from the public internet. This could lead to unauthorized access to internal data or administrative interfaces.

Technical details

A Server-Side Request Forgery (SSRF) vulnerability exists in OpenClaw due to improper hostname validation during browser navigation. The validation logic could be bypassed using DNS rebinding, where a hostname's IP resolution changes between the time of validation and the time the Chromium engine performs the actual request. This allows an attacker to pivot from a public-facing URL to an internal or restricted IP address. The fix involves tightening browser hostname navigation policies to ensure unallowlisted URLs fail closed. The issue is addressed in version 2026.4.10 and later.

Affected products

• openclaw openclaw < 2026.4.10

Timeline

• 2026-04-16: patched: First stable tag containing the fix is v2026.4.10
• 2026-04-17: advisory: GitHub Advisory published

References

• https://api.github.com/users/dhyabi2
• https://github.com/dhyabi2
• https://api.github.com/users/dhyabi2/gists%7B/gist_id%7D
• https://api.github.com/users/dhyabi2/repos
• https://avatars.githubusercontent.com/u/32069256?v=4
• https://api.github.com/users/dhyabi2/events%7B/privacy%7D