OpenClaw Windows Node through version 2026.9.4 contains an SSRF vulnerability in the canvas.present feature. This vulnerability allows attackers who have gateway or agent access to bypass URL risk evaluation protections implemented by canvas.navigate. By exploiting this, attackers can coerce the node's embedded WebView component to initiate requests to internal network resources such as localhost, private networks, or tailnet services, potentially exposing internal services or data.

The vulnerability enables attackers with certain access privileges (gateway or agent) to perform SSRF attacks, potentially allowing them to interact with internal network resources that are normally inaccessible externally. This could lead to unauthorized information disclosure or interaction with internal services. The CVSS 4.0 base score is 5.3, indicating a medium severity impact with network attack vector, low complexity, and no user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict gateway or agent access to trusted users only to minimize risk. Monitor for updates from OpenClaw regarding patches or mitigations for this vulnerability.