Server-Side Request Forgery (SSRF) Vulnerability in OpenClaw Package
Summary
GHSA-pg2v-8xwh-qhcc: OpenClaw affected by SSRF in optional Tlon (Urbit) extension authentication. Affects openclaw versions < 2026.2.14. Fixed in 2026.2.14. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source package designed for building applications with a focus on extensibility and modularity. It allows developers to integrate various extensions to enhance functionality. One such extension is the Tlon (Urbit) extension, which facilitates user authentication through a configurable base URL. However, this flexibility can lead to security vulnerabilities if not properly managed, particularly in the case of SSRF.
Vulnerability Detail
The vulnerability arises from the Tlon (Urbit) extension's acceptance of a user-provided base URL for authentication, which is then used to make outbound HTTP requests. This can lead to Server-Side Request Forgery (SSRF), allowing an attacker to manipulate the configured URL and induce the server to make requests to arbitrary hosts, including internal network addresses. This poses a significant risk, especially in environments where sensitive internal services could be exposed.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.14
This is the first release that contains the fix.
npm install openclaw@2026.2.14Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not possible, consider disabling the Tlon (Urbit) extension or restricting access to the configuration settings that allow untrusted users to modify the Urbit URL.
Conclusion
The SSRF vulnerability in the OpenClaw package, specifically within the Tlon (Urbit) extension, poses a significant risk to affected deployments. It is crucial to update to the patched version 2026.2.14 to mitigate this risk. Additionally, utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for openclaw →
FAQ
Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources.
You can use Vulert, which monitors open-source vulnerabilities in your software. By checking your package-lock.json file, you can receive real-time alerts for vulnerabilities.
SSRF vulnerabilities can lead to unauthorized access to internal services, data leakage, and can be exploited to perform further attacks on the network.
Yes, you can disable the Tlon extension or restrict access to its configuration settings to prevent untrusted users from modifying the Urbit URL.
The CVSS score for this vulnerability is 6.5, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
