Openclaw cli: OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model
Description
A vulnerability in the openclaw npm package (openclaw-cli) affects Microsoft Teams media fetch paths by bypassing the shared SSRF guard model. This inconsistency in host and DNS enforcement across redirect and fetch hops could lead to SSRF boundary policy drift. The issue is fixed by unifying fetch paths through a shared SSRF-guarded mechanism with centralized hostname allowlist policies. Versions up to 2026.2.25 are affected, with a patch planned in version 2026.2.26.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The openclaw-cli package's Microsoft Teams media handling used mixed fetch paths for Graph metadata/content and attachment authentication retry flows. Some of these paths bypassed the shared SSRF guard model, causing inconsistent enforcement of host and DNS policies across redirect and fetch hops. This inconsistency could allow SSRF boundary policy drift between channel and plugin paths. The vulnerability is addressed by routing all Microsoft Teams Graph message, hosted content, and attachment fetches through a unified SSRF-guarded fetch path, centralizing hostname suffix allowlist policies in the plugin-sdk, and ensuring consistent policy enforcement. The fix is included in version 2026.2.26.
Potential Impact
The vulnerability could allow Server-Side Request Forgery (SSRF) boundary inconsistencies in Microsoft Teams media fetch operations, potentially enabling unauthorized network requests or data access due to bypassed SSRF guard policies. However, no known exploits in the wild have been reported. The impact is limited by the requirement for low privileges and high attack complexity as indicated by the CVSS vector.
Mitigation Recommendations
A patch is available in openclaw-cli version 2026.2.26 that unifies Microsoft Teams media fetch paths under a shared SSRF guard model with centralized hostname allowlist policies. Users should upgrade to version 2026.2.26 or later to remediate this vulnerability.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-GHSA-7qf6-h84j-8fq4
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac2458812601ec6a31640a0
Added to database: 10/04/2026, 12:24:40 UTC
Last enriched: 10/04/2026, 12:32:59 UTC
Last updated: 10/04/2026, 12:32:59 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.