OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. (CVE-2026-100574)
OpenClaw, an npm package, contains a server-side request forgery (SSRF) vulnerability in its trusted-host DNS checks prior to version 2026.8.1. The vulnerability allows a trusted hostname resolving to an unspecified address (0.0.0.0 or ::) to bypass SSRF destination validation. This enables an attacker who can manipulate DNS for an allowed hostname to cause a guarded fetch to reach internal services bound to loopback addresses and potentially disclose sensitive responses. The vulnerability is fixed in version 2026.8.1.
AI Analysis
Technical Summary
OpenClaw versions before 2026.8.1 have an SSRF vulnerability in the trusted-host DNS recheck mechanism. Specifically, if a trusted hostname resolves to an unspecified IP address (0.0.0.0 or ::), the SSRF destination validation is bypassed. An attacker capable of influencing DNS for an allowed hostname can exploit this to make the application fetch data from internal services bound to loopback interfaces, potentially exposing sensitive information. The vulnerability is tracked as CVE-2026-100574 and has a CVSS 3.1 base score of 5.9.
Potential Impact
An attacker who can control DNS resolution for a trusted hostname can bypass SSRF protections and cause the application to send requests to internal services bound to loopback addresses. This may lead to unauthorized disclosure of sensitive data depending on the internal service's response. The vulnerability does not impact integrity or availability but has a high confidentiality impact.
Mitigation Recommendations
Upgrade OpenClaw to version 2026.8.1 or later, where this SSRF vulnerability is fixed. No other mitigation is indicated or required.
OpenClaw (npm package 'openclaw') before 2026.8.1 contains a server-side request forgery vulnerability in its trusted-host DNS checks. (CVE-2026-100574)
Description
OpenClaw, an npm package, contains a server-side request forgery (SSRF) vulnerability in its trusted-host DNS checks prior to version 2026.8.1. The vulnerability allows a trusted hostname resolving to an unspecified address (0.0.0.0 or ::) to bypass SSRF destination validation. This enables an attacker who can manipulate DNS for an allowed hostname to cause a guarded fetch to reach internal services bound to loopback addresses and potentially disclose sensitive responses. The vulnerability is fixed in version 2026.8.1.
CVSS v3.1
Score 5.9medium
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
OpenClaw versions before 2026.8.1 have an SSRF vulnerability in the trusted-host DNS recheck mechanism. Specifically, if a trusted hostname resolves to an unspecified IP address (0.0.0.0 or ::), the SSRF destination validation is bypassed. An attacker capable of influencing DNS for an allowed hostname can exploit this to make the application fetch data from internal services bound to loopback interfaces, potentially exposing sensitive information. The vulnerability is tracked as CVE-2026-100574 and has a CVSS 3.1 base score of 5.9.
Potential Impact
An attacker who can control DNS resolution for a trusted hostname can bypass SSRF protections and cause the application to send requests to internal services bound to loopback addresses. This may lead to unauthorized disclosure of sensitive data depending on the internal service's response. The vulnerability does not impact integrity or availability but has a high confidentiality impact.
Mitigation Recommendations
Upgrade OpenClaw to version 2026.8.1 or later, where this SSRF vulnerability is fixed. No other mitigation is indicated or required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-97x7-r22f-j42v
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-100574"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6ab74f2af7a7c54106e1382d
Added to database: 09/26/2026, 04:50:50 UTC
Last enriched: 09/26/2026, 04:54:35 UTC
Last updated: 09/27/2026, 01:47:40 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.