GitHub Advisoryadvisory · npm
GHSA-9q7v-8mr7-g23p OpenClaw: SSRF via Unguarded `fetch()` in Marketplace Plugin Download and Ollama Model Discovery
MEDIUM
Official page ↗
- Aliases
- CVE-2026-41302
- Ecosystem
- npm
- Packages
- openclaw
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
- Weaknesses
- CWE-918
- Reviewed
- 2026-04-02
Affected packages
• npm openclaw: < 2026.3.31 → fixed in 2026.3.31
Description
Summary
SSRF via Unguarded `fetch()` in Marketplace Plugin Download and Ollama Model Discovery
Current Maintainer Triage
• Status: narrow
• Normalized severity: medium
• Assessment: Keep the shipped marketplace archive-fetch SSRF, but narrow out the Ollama half because it is operator-configured and overlaps weaker trust-model or duplicate SSRF ground.
Affected Packages / Versions
• Package: `openclaw` (npm)
• Latest published npm version: `2026.3.31`
• Vulnerable version range: `= 2026.3.31`
• First stable tag containing the fix: `v2026.3.31`
Fix Commit(s)
• `8deb9522f3d2680820588b190adb4a2a52f3670b` — 2026-03-30T20:08:38+01:00
OpenClaw thanks @tdjackey for reporting.
Related
Alias · CVE (1)
- CVE-2026-41302 OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows… vulnerability
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://github.com/openclaw/openclaw/security/advisories/GHSA-9q7v-8mr7-g23p web
- https://nvd.nist.gov/vuln/detail/CVE-2026-41302 advisory
- https://github.com/openclaw/openclaw/commit/8deb9522f3d2680820588b190adb4a2a52f3670b web
- https://github.com/openclaw/openclaw package
- https://github.com/openclaw/openclaw/releases/tag/v2026.3.31 web
- https://www.vulncheck.com/advisories/openclaw-server-side-request-forgery-via-unguarded-fetch-in-marketplace-plugin-download web