Openclaw cli: OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists (CVE-2026-32037)

The OpenClaw CLI package (npm) has a vulnerability (CVE-2026-32037) in its MSTeams media download functionality. Specifically, redirect handling in attachment paths does not consistently enforce the configured mediaAllowHosts allowlist, allowing redirect chains to non-allowlisted hosts before accepting fetched content. This flaw can be exploited by attackers who can supply or influence attachment URLs, potentially bypassing SSRF boundary controls. The vulnerability affects versions up to and including 2026.2.21-2 and is addressed in the upcoming 2026.2.22 release. Fix commits include 73d93dee64127a26f1acd09d0403b794cdeb4f5c and b34097f62df9d1960cc22600269cd3f3284e2124.

Attackers able to control or influence attachment URLs in MSTeams media download flows can bypass the configured mediaAllowHosts allowlist via redirect chains. This weakens SSRF protections by allowing requests to non-allowlisted hosts, potentially exposing internal or sensitive resources. The impact includes limited confidentiality, integrity, and availability consequences as indicated by the CVSS vector.

A patch is available and planned for release in version 2026.2.22. Users should upgrade to this version once published to remediate the vulnerability. Until then, no additional vendor-recommended mitigations are specified.