Tag

Cve-2026-28476

1 brief RSS

OpenClaw SSRF Vulnerability via Unguarded Configured Base URLs

OpenClaw versions 2026.3.24 and earlier are vulnerable to Server-Side Request Forgery (SSRF) because of unguarded configured base URLs in multiple channel extensions, allowing attackers to potentially access internal resources.

ssrf openclaw cve-2026-28476

2r 1t Mar 29, 2026