CVE-2026-6011

high
Published 2026-04-10 · Modified 2026-04-10
CVSS v3
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v2
5.1
VIR risk
8.1

Description

OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts

Predictions

Exploit likelihood
88%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cna@vuldb.com — https://vuldb.com/submit/795224

vendor Authored 2026-05-27

Vendor advisory: cna@vuldb.com — https://github.com/zast-ai/vulnerability-reports/blob/main/openclaw/ssrf.md

vendor Authored 2026-05-27

Vendor advisory: cna@vuldb.com — https://github.com/openclaw/openclaw/releases/tag/v2026.1.29

vendor Authored 2026-05-27

Vendor advisory: cna@vuldb.com — https://github.com/openclaw/openclaw/commit/b623557a2ec7e271bda003eb3ac33fbb2e218505#diff-06572a96a58dc510037d5efa622f9bec8519bc1beab13c9f251e97e657a9d4edR44

Package impact

EcosystemPackageVulnerableFixed
npm npmopenclaw<2026.1.292026.1.29

Application impact

VendorProductVersionsFixed
openclawopenclaw{"endExcluding":"2026.1.29"}2026.1.29

References

CWEs

CWE-918

Verify integrity in audit chain (admin only). AS-IS.