Openclaw cli: OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication (CVE-2026-28476)

The optional Tlon (Urbit) extension in openclaw-cli versions up to 2026.2.13 accepted a user-supplied base URL for authentication and used it to construct outbound HTTP requests, enabling SSRF. This vulnerability allows an attacker who can influence the configured Urbit URL to induce the gateway to make HTTP requests to arbitrary hosts, including internal network addresses. The fix in version 2026.2.14 adds validation and normalization of the base URL and implements an SSRF guard that blocks private/internal hosts by default, with an opt-in option to allow private network access.

An attacker able to control the Urbit URL configuration in deployments using the Tlon extension can cause the system to make HTTP requests to attacker-chosen hosts, potentially including internal network resources. This can lead to information disclosure, internal network scanning, or other SSRF-related impacts. Deployments not using the Tlon extension or where the Urbit URL cannot be influenced by untrusted users are not affected.

A patch is available in openclaw-cli version 2026.2.14, which should be applied once released. This update validates and normalizes the base URL and includes an SSRF guard blocking private/internal hosts by default. Until the patch is applied, ensure that untrusted users cannot modify the Urbit URL configuration or disable the Tlon extension if not needed.