Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-41361: OpenClaw SSRF guard bypass via IPv6 special‑use ranges (CVSS 7.1). Affected: OpenClaw < 2026.3.28. Remote network exploit, no auth required. Fixed in 2026.3.28+. #OpenClaw #CVE
Post summary
An unauthenticated remote network exploitation via an SSRF guard bypass in OpenClaw using IPv6 special‑use ranges is disclosed (CVSS 7.1) and has been fixed in version 2026.3.28+.
CVE-2026-41361 OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs ta… https://www.cve.org/CVERecord?id=CVE-2026-41361
Post summary
The text discloses a SSRF guard bypass in OpenClaw, detailing technical aspects of the flaw but lacks evidence of exploitation, a PoC, patch information, or false-positive claims.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openclaw | openclaw | - | node.js | - |