The ClawHub application backend contains an SSRF vulnerability in the public profile preview image fetching feature. The vulnerability arises because the hostname validation only checks textual hostnames against private address patterns but does not validate the resolved IP address or prevent DNS rebinding attacks. This allows a public-looking hostname to resolve to internal addresses or change resolution between validation and connection. A maintainer demonstrated an outbound connection to a loopback listener controlled by the attacker, confirming the SSRF. The vulnerability was fixed in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, deployed on 2026-09-11. The npm CLI and OpenClaw runtime products are unaffected.

An attacker can cause the server to make HTTP requests to internal network resources or attacker-controlled endpoints via SSRF. This could potentially expose internal services or sensitive information. However, no evidence of further exploitation such as credential disclosure or code execution has been demonstrated. The CVSS score of 6.9 (medium severity) reflects the moderate risk of SSRF with limited demonstrated impact.

A fix is available and was deployed on 2026-09-11 in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650. Self-hosted deployments should update to this revision or a later one to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.