Cve-2026-41361

OpenClaw before 2026.3.28 is vulnerable to a Server-Side Request Forgery (SSRF) guard bypass due to its failure to block four IPv6 special-use ranges, allowing attackers to craft URLs targeting internal or non-routable IPv6 addresses.