VulnSocial

CVE-2026-6011General(openclaw / openclaw)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the file src/agents/tools/web-fetch.ts of the component assertPublicHostname Handler. Executing a manipulation can lead to server-side request forgery. The attack can be executed remotely. This attack is characterized by high complexity. The exploitation is known to be difficult. The exploit has been made available to the public and could be used for attacks. Upgrading to version 2026.1.29 can resolve this issue. This patch is called b623557a2ec7e271bda003eb3ac33fbb2e218505. Upgrading the affected component is advised.

openclaw CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • openclaw

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-10); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
openclaw
Products
openclaw

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-10: 2Mentions · 2026-04-11: 1Technical Details · 2026-04-10: 1Technical Details · 2026-04-11: 104-1004-11
Signal classification2 categories
General
266.7%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-102
General2
2026-04-111
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    General

    CVE-2026-6011 A weakness has been identified in OpenClaw up to 2026.1.26. Affected by this issue is some unknown functionality of the file src/agents/tools/web-fetch.ts of the compon… https://www.cve.org/CVERecord?id=CVE-2026-6011

    Post summary

    The post mentions CVE-2026-6011 and highlights a weakness in OpenClaw’s web‑fetch component, but provides no details on exploitation, patches, or technical specifics.

    00010125
    57.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-6011 Server-Side Request Forgery in OpenClaw Up to 2026.1.26 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6011

    Post summary

    The post only announces a SSRF vulnerability in OpenClaw 2026.1.26 without providing PoC, exploitation details, or remediation.

    0001055
    4.0K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-6011 📊 Severity: 5.6 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6011 #CVE-2026-6011 #CVE #Medium #CyberSecurity #InfoSec https://t.co/kvILjGzsmw

    Post summary

    New CVE-2026-6011 is announced with severity 5.6 (Medium risk), affecting multiple products; only a reference to the NVD entry is provided, with no PoC, exploit, or patch details.

    0000031
    125 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appopenclawopenclaw-node.js-

Explore more

Back to dashboardopenclaw CVEsopenclaw vulnerabilities