GHSA-2767-2q9v-9326 OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes

• npm openclaw: < 2026.4.12 → fixed in 2026.4.12

Summary QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes. Affected Packages / Versions • Package: `openclaw` • Ecosystem: npm • Affected versions: `= 2026.4.12` Impact QQBot reply media URLs could be treated as trusted media sources, allowing SSRF fetches whose returned bytes were then re-uploaded through the channel. Technical Details The fix routes QQBot remote media fetches through SSRF-guarded media fetching and explicit URL allowlist policy. Fix The issue was fixed in #63495 and #65788. The first stable tag containing the fix is `v2026.4.12`, and `[email protected]` includes the fix. Fix Commit(s) • `08ae021d1f4f02e0ca5fd8a3b9659291c1ecf95a` • `ddb7a8dd80b8d5dd04aafa44ce7a4354b568bb2d` • PR: #63495, #65788 Release Process Note Users should upgrade to `openclaw` 2026.4.12 or newer. The latest npm release, `2026.4.14`, already includes the fix. Credits Thanks to @threalwinky for reporting this issue.