SSRF Vulnerability in OpenClaw Image Tool: Remote Fetch Exploit
Summary
GHSA-56f2-hvwg-5743: OpenClaw affected by SSRF in Image Tool Remote Fetch. Affects openclaw versions < 2026.2.2. Fixed in 2026.2.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source tool designed for managing and processing images within various applications. It allows users to fetch images from different sources, including local files and remote URLs. However, a recent vulnerability has been identified in its Image tool, which can be exploited to make unauthorized HTTP requests to internal or restricted network targets.
Vulnerability Detail
The vulnerability stems from a server-side request forgery (SSRF) flaw in the Image tool of OpenClaw. Attackers can exploit this by forcing the application to make HTTP requests to arbitrary internal resources, including localhost and cloud metadata services. This can lead to unauthorized access to sensitive information and internal endpoints, potentially allowing attackers to probe the internal network or access confidential data. The vulnerability is present in versions of OpenClaw prior to 2026.2.2, where HTTP(S) URLs were fetched without adequate SSRF protections.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.2
This is the first release that contains the fix.
npm install openclaw@2026.2.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict access to the Image tool to trusted users only, and avoid passing untrusted image URLs to the tool until the package is updated.
Conclusion
The SSRF vulnerability in OpenClaw's Image tool poses significant risks by allowing unauthorized HTTP requests to internal resources. It is crucial to update to the patched version 2026.2.2 or later to mitigate these risks effectively. Additionally, utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to make requests from the server to internal or external resources, potentially exposing sensitive information.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The vulnerability can lead to unauthorized access to internal services, data leakage, and network probing, which can compromise the security of the affected systems.
Yes, you can restrict access to the Image tool and avoid using untrusted image URLs as a temporary measure until the patch is applied.
The CVSS score of this vulnerability is 7.6, indicating a high severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
