Openclaw cli: OpenClaw: Node camera URL payload host-binding bypass allowed gateway fetch pivots

OpenClaw CLI accepted camera.snap and camera.clip node payload URL fields and downloaded them on the gateway or agent host without binding these downloads to the resolved node host. This lack of host binding allowed a malicious or compromised paired node to direct the gateway to fetch URLs from arbitrary off-node destinations reachable from the host network. The vulnerability affects versions >=2026.2.13 and <2026.3.2. The fix introduces fail-closed node-host binding, hostname matching between payload URL and resolved node host, SSRF-guarded fetch with redirect host and protocol checks, and applies these protections across CLI and agent tool camera paths.

A malicious or compromised paired node within the same operator trust boundary could exploit this vulnerability to cause the gateway host to fetch URLs from unintended off-node destinations. This could be used for internal network reconnaissance or pivoting attacks in environments where paired nodes are not fully trusted. The impact includes potential confidentiality, integrity, and availability risks at a low to medium level.

A patch is available and has been released in OpenClaw CLI version 2026.3.2. Users should upgrade to version 2026.3.2 or later to apply the fix, which enforces strict hostname matching and SSRF-guarded fetches for camera URL payload downloads. No additional mitigations are required beyond applying the official fix.