Openclaw cli: OpenClaw validates Zalo outbound photo URLs through the SSRF guard (CVE-2026-44116)
Description
OpenClaw CLI versions before 2026.4.22 contain a vulnerability where the Zalo plugin could forward attacker-controlled outbound photo URLs to the Zalo Bot API without proper SSRF validation. This issue was fixed in version 2026.4.22 by enforcing SSRF hostname validation on outbound photo URLs.
CVSS v3.1
Score 8.6high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The OpenClaw CLI package (npm) versions >=2026.1.29 and <2026.4.22 have a vulnerability (CVE-2026-44116) in the Zalo plugin where outbound photo URLs could bypass OpenClaw's SSRF guard. This allowed potentially unsafe URLs to be forwarded to the Zalo Bot API without validation. The fix, included in version 2026.4.22, ensures that the sendPhoto function parses and validates outbound photo URLs against the shared SSRF hostname policy before posting, and routes media-reply paths through guarded outbound media helpers.
Potential Impact
An attacker could supply a malicious outbound photo URL that bypasses SSRF validation, potentially enabling server-side request forgery (SSRF) attacks via the Zalo Bot API integration. The CVSS 3.1 score is 8.6 (high severity) with network attack vector, low attack complexity, no privileges or user interaction required, scope changed, and high confidentiality impact but no integrity or availability impact.
Mitigation Recommendations
A patch is available and should be applied. Users should upgrade OpenClaw CLI to version 2026.4.22 or later, which contains the fix that enforces SSRF validation on outbound photo URLs in the Zalo plugin. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-44116
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 3.1
Threat ID: 6ac245d312601ec6a316801a
Added to database: 10/04/2026, 12:25:55 UTC
Last enriched: 10/04/2026, 13:17:30 UTC
Last updated: 10/04/2026, 16:08:38 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.