Tag
OpenClaw before 2026.4.8 is vulnerable to server-side request forgery (SSRF) due to a policy bypass that allows attackers to trigger navigations past normal SSRF checks, potentially leading to unauthorized access of restricted resources.