Openclaw cli: OpenClaw: QQBot direct media upload skipped URL SSRF validation (CVE-2026-44117)

CVE-2026-44117 affects the OpenClaw CLI npm package versions prior to 2026.4.20. The vulnerability arises because the QQBot direct-upload media path forwards attacker-controlled image URLs without applying the SSRF validation that is used in the local download path. This can cause the QQBot media delivery requests or relay URLs to be manipulated in ways not intended by the operator. The vulnerability is confined to QQBot outbound media handling and does not allow access to arbitrary local files. The issue was fixed by adding validation of QQBot direct-upload media URLs before the uploadC2CMedia and uploadGroupMedia direct-upload calls, with the fix included in version 2026.4.20.

An attacker can supply crafted image URLs to the QQBot direct-upload media feature, causing the system to forward media delivery requests to unintended URLs. This could lead to SSRF (Server-Side Request Forgery) scenarios limited to QQBot media handling. The vulnerability does not allow access to arbitrary local files or broader system compromise. The CVSS score is 5.8 (medium severity), reflecting network attack vector, low complexity, no privileges required, no user interaction, scope change, and limited confidentiality impact.

A fix is available in OpenClaw version 2026.4.20. Users should upgrade to this version or later to ensure QQBot direct-upload media URLs are properly validated before processing. No additional mitigation steps are indicated beyond applying the official patch.