https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 05:48:32 +0000 https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-28467 <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary</p> <p>Versions of the `openclaw` npm package prior to `2026.2.2` could be coerced into fetching arbitrary `http(s)` URLs during attachment/media hydration. An attacker who can influence the media URL (for example via model-controlled `sendAttachment` or auto-reply media URLs) could trigger SSRF to internal resources and exfiltrate the fetched bytes as an outbound attachment.</p> <p>### Plain-English Explanation</p> <p>OpenClaw can send files by downloading them first.</p> <p>On vulnerable versions (`&lt; 2026.2.2`), if an attacker could get OpenClaw to treat a URL as the “file to attach”, OpenClaw would download that URL from the gateway machine and then send the downloaded bytes back out as an attachment.</p> <p>That matters because the gateway can often reach internal-only endpoints that an attacker cannot (for example `127.0.0.1` services, private RFC1918 addresses, or cloud metadata endpoints). This is a data-leak risk.</p> <p>This does not directly grant code execution or shell access; it is about making the gateway perform HTTP requests and returning the response bytes.</p> <p>### Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected: `&lt; 2026.2.2` - Fixed: `&gt;= 2026.2.2`</p> <p>Release timeline (npm):</p> <p>- `2026.2.1` published `2026-02-02T11:45:27Z` - `2026.2.2` published `2026-02-04T00:56:41Z` - This advisory was created `2026-02-05T10:42:26Z`</p> <p>### Details</p> <p>In affected versions, remote media fetching performed a raw `fetch(url)` without SSRF protections.</p> <p>Starting in `2026.2.2`, remote media f…</p> <p><strong>Affected:</strong> Homebrew: openclaw-cli</p> <p>### Summary</p> <p>Versions of the `openclaw` npm package prior to `2026.2.2` could be coerced into fetching arbitrary `http(s)` URLs during attachment/media hydration. An attacker who can influence the media URL (for example via model-controlled `sendAttachment` or auto-reply media URLs) could trigger SSRF to internal resources and exfiltrate the fetched bytes as an outbound attachment.</p> <p>### Plain-English Explanation</p> <p>OpenClaw can send files by downloading them first.</p> <p>On vulnerable versions (`&lt; 2026.2.2`), if an attacker could get OpenClaw to treat a URL as the “file to attach”, OpenClaw would download that URL from the gateway machine and then send the downloaded bytes back out as an attachment.</p> <p>That matters because the gateway can often reach internal-only endpoints that an attacker cannot (for example `127.0.0.1` services, private RFC1918 addresses, or cloud metadata endpoints). This is a data-leak risk.</p> <p>This does not directly grant code execution or shell access; it is about making the gateway perform HTTP requests and returning the response bytes.</p> <p>### Affected Packages / Versions</p> <p>- Package: `openclaw` (npm) - Affected: `&lt; 2026.2.2` - Fixed: `&gt;= 2026.2.2`</p> <p>Release timeline (npm):</p> <p>- `2026.2.1` published `2026-02-02T11:45:27Z` - `2026.2.2` published `2026-02-04T00:56:41Z` - This advisory was created `2026-02-05T10:42:26Z`</p> <p>### Details</p> <p>In affected versions, remote media fetching performed a raw `fetch(url)` without SSRF protections.</p> <p>Starting in `2026.2.2`, remote media f…</p> https://db.gcve.eu/vuln/brew-openclaw-cli-cve-2026-28467 https://db.gcve.eu/vuln/cve-2026-28467 <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.2 contain a server-side request forgery vulnerability in attachment and media URL hydration that allows remote attackers to fetch arbitrary HTTP(S) URLs. Attackers who can influence media URLs through model-controlled sendAttachment or auto-reply mechanisms can trigger SSRF to internal resources and exfiltrate fetched response bytes as outbound attachments.</p> <p><strong>Affected:</strong> OpenClaw</p> <p>OpenClaw versions prior to 2026.2.2 contain a server-side request forgery vulnerability in attachment and media URL hydration that allows remote attackers to fetch arbitrary HTTP(S) URLs. Attackers who can influence media URLs through model-controlled sendAttachment or auto-reply mechanisms can trigger SSRF to internal resources and exfiltrate fetched response bytes as outbound attachments.</p> https://db.gcve.eu/vuln/cve-2026-28467