Openclaw cli: OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard (CVE-2026-32019)

The OpenClaw CLI package (npm) up to version 2026.2.21-2 contains a vulnerability (CVE-2026-32019) where the SSRF guard's IPv4 private range checks are incomplete. The isPrivateIpv4() function omitted multiple RFC-defined special-use and non-global IPv4 ranges, such as 198.18.0.0/15, allowing SSRF requests to these addresses through the web_fetch URL fetching functionality. This flaw could be exploited if an attacker has network reachability to these special-use IP ranges and can trigger the web_fetch path. The issue is fixed starting from version 2026.2.22 by consolidating local-host and tailnet range checks into a canonical IP classification flow.

The vulnerability allows an attacker with network access to certain IPv4 special-use ranges to bypass SSRF protections in OpenClaw CLI's web fetch guard. This could potentially lead to unauthorized internal network requests. However, exploitation requires specific network reachability and the ability to invoke the web_fetch URL fetching path. The impact is limited to information disclosure or interaction with internal services reachable via these special-use IP ranges. The CVSS score is 5.3 (medium severity), reflecting limited impact and attack complexity.

An official patch is available and should be applied. Users should upgrade OpenClaw CLI to version 2026.2.22 or later, where the SSRF guard has been improved to correctly block all relevant IPv4 special-use and non-global ranges. No additional mitigation steps are required as the vulnerability is addressed by this update.