GitHub Advisoryadvisory · npm

GHSA-2hh7-c75g-qj2r OpenClaw validates Zalo outbound photo URLs through the SSRF guard

MEDIUM Published 2026-05-04 Modified 2026-05-12 Official page ↗
Aliases
CVE-2026-44116
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Weaknesses
CWE-918
Reviewed
2026-05-04

Affected packages

• npm openclaw: < 2026.4.22 → fixed in 2026.4.22

Description

Summary Zalo outbound photo URLs are validated through the SSRF guard. Affected Packages / Versions • Package: openclaw (npm) • Affected versions: <= 2026.4.21 • Fixed version: 2026.4.22 Impact The Zalo plugin could forward an attacker-controlled outbound photo URL to the Zalo Bot API without first applying OpenClaw's SSRF validation policy. Fix Zalo sendPhoto now parses and validates outbound photo URLs with the shared SSRF hostname policy before posting to Zalo, and media-reply paths route through the guarded outbound media helpers. Fix Commit(s) • a65eb1b864b7630c1242a82de9e5799b80583c3f Verification • The fix commit is contained in the public v2026.4.22 tag. • [email protected] is published on npm and the compiled package contains the fix. • Focused regression coverage for this path passed before publication. OpenClaw thanks @foodlook for reporting.

Related

Alias · CVE (1)

  • CVE-2026-44116 OpenClaw before 2026.4.22 contains a server-side request forgery vulnerability in the Zalo plugin's sendPhoto function that fails to… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References