GitHub Advisoryadvisory · npm

GHSA-vjx8-8p7h-82gr OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF Protection

MEDIUM Published 2026-04-07 Modified 2026-04-24 Official page ↗
Aliases
CVE-2026-41297
Ecosystem
npm
Packages
openclaw
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
Weaknesses
CWE-918
Reviewed
2026-04-07

Affected packages

• npm openclaw: < 2026.3.31 → fixed in 2026.3.31

Description

Summary Marketplace Plugin Download Follows Redirects Without SSRF Protection Current Maintainer Triage • Status: open • Normalized severity: medium • Assessment: v2026.3.28 still uses bare redirect-following fetch in src/plugins/marketplace.ts for marketplace archives, and fixed-on-main only does not change that shipped SSRF exposure. Affected Packages / Versions • Package: `openclaw` (npm) • Latest published npm version: `2026.3.31` • Vulnerable version range: `= 2026.3.31` • First stable tag containing the fix: `v2026.3.31` Fix Commit(s) • `2ce44ca6a1302b166a128abbd78f72114f2f4f52` — 2026-03-31T12:59:42+01:00 Release Process Note • The fix is already present in released version `2026.3.31`. • This draft looks ready for final maintainer disposition or publication, not additional code-fix work. Thanks @AntAISecurityLab for reporting.

Related

Alias · CVE (1)

  • CVE-2026-41297 OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References