Openclaw cli: OpenClaw's web tools strict URL guard could lose DNS pinning when env proxy is configured (CVE-2026-22181)
Description
OpenClaw CLI versions up to 2026.3.1 have a vulnerability where strict URL fetch paths lose DNS pinning if environment proxy variables (HTTP_PROXY, HTTPS_PROXY, ALL_PROXY) are configured. This allows attacker-influenced URLs to bypass strict destination checks and be routed through proxies, potentially accessing internal or private targets reachable via the proxy. The issue is fixed in version 2026.3.2. Operators can mitigate by clearing proxy environment variables or disabling certain web fetch features before upgrading.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw CLI's strict URL fetch mechanisms perform hostname resolution and policy checks to enforce destination binding and prevent SSRF. However, when environment proxy variables are set, the runtime connection routing can use an EnvHttpProxyAgent, bypassing the DNS-pinned dispatcher. This creates a gap between the check-time resolution and connect-time routing, allowing attacker-controlled URLs to be routed through proxies instead of strictly pinned destinations. The vulnerability affects versions >=2026.1.29 and <2026.3.2 and is fixed in 2026.3.2 by enforcing DNS pinning on strict/untrusted URL paths and restricting proxy bypass to trusted endpoints via explicit opt-in.
Potential Impact
In environments where proxy environment variables are configured, attacker-controlled URLs processed by OpenClaw web tools could be routed through proxies rather than strictly pinned destinations. This may allow attackers to reach internal or private network targets accessible via the proxy, potentially bypassing SSRF protections.
Mitigation Recommendations
A patch is available in OpenClaw CLI version 2026.3.2 and later. Operators should upgrade to this version to fully remediate the issue. Until upgrading, exposure can be reduced by clearing HTTP_PROXY, HTTPS_PROXY, and ALL_PROXY environment variables for OpenClaw runtime processes or by disabling the web_fetch and web_search features where untrusted URL input is possible.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- BREW-openclaw-cli-CVE-2026-22181
- Osv Schema Version
- 1.7.3
- Ecosystems
- ["Homebrew"]
- Cvss Version
- 4.0
Threat ID: 6ac245d112601ec6a3167ffd
Added to database: 10/04/2026, 12:25:53 UTC
Last enriched: 10/04/2026, 13:14:57 UTC
Last updated: 10/04/2026, 16:08:36 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.