GitHub Advisoryadvisory · npm

GHSA-g99v-8hwm-g76g OpenClaw has web_search citation redirect SSRF via private-network-allowing policy

HIGH Published 2026-03-02 Modified 2026-03-20 Official page ↗
Aliases
CVE-2026-31989
Ecosystem
npm
Packages
openclaw
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-918
Reviewed
2026-03-02

Affected packages

• npm openclaw: < 2026.3.1 → fixed in 2026.3.1

Description

Summary Gemini `web_search` citation redirect resolution used a private-network-allowing SSRF policy. A citation URL redirect could target loopback/private/internal destinations and be fetched by the gateway. Impact An attacker who can influence citation redirect targets could trigger internal-network requests from the OpenClaw host. Fix Citation redirect resolution now uses strict/default SSRF policy (no private-network override), blocking localhost/private/internal redirect targets. Affected and Patched Versions • Affected: `<= 2026.2.26` • Patched: `2026.3.1`

Related

Alias · CVE (1)

  • CVE-2026-31989 OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References