IPv6 Multicast SSRF Classifier Bypass in OpenClaw
Summary
GHSA-h97f-6pqj-q452: OpenClaw has a IPv6 multicast SSRF classifier bypass. Affects openclaw versions < 2026.2.25. Fixed in 2026.2.25. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenClaw is an open-source library designed for network fetching and navigation, primarily utilizing HTTP and HTTPS protocols. It is widely used in applications that require secure and efficient data retrieval from web resources. However, a recent vulnerability has been identified in its SSRF (Server-Side Request Forgery) IP classifier, which could potentially allow unauthorized access to internal resources.
Vulnerability Detail
The vulnerability arises from OpenClaw's failure to classify IPv6 multicast literals (specifically the range ff00::/8) as blocked or private-internal addresses. This oversight allows these multicast addresses to bypass SSRF preflight checks, potentially leading to unauthorized network requests. The technical details reveal that addresses such as ff02::1 and ff05::1:3 were not adequately classified, exposing the application to low-severity SSRF attacks. This issue has been categorized under CWE-918, indicating a weakness in the application's ability to validate and restrict network requests appropriately.
How To Fix
Latest published version: 2026.10.6 as of 22 Oct 2026
npm install openclaw@2026.10.6Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
2026.2.25
This is the first release that contains the fix.
npm install openclaw@2026.2.25Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can implement additional validation checks in their application to filter out IPv6 multicast addresses before making network requests. This can be done by adding a custom function to check if the IP address falls within the multicast range.
Conclusion
In summary, the IPv6 multicast SSRF classifier bypass in OpenClaw presents a moderate risk to applications utilizing this library. It is crucial for developers to update to the latest patched version to mitigate this vulnerability. Additionally, implementing temporary workarounds can help secure applications until the update is applied.
See every vulnerability recorded for openclaw →
FAQ
Server-Side Request Forgery (SSRF) is a security vulnerability that allows an attacker to send unauthorized requests from a vulnerable server to internal or external resources.
If your application uses OpenClaw and does not update to the patched version, it may be susceptible to SSRF attacks, potentially exposing sensitive internal resources.
IPv6 multicast addresses are used to send data to multiple destinations simultaneously. They are identified by the prefix ff00::/8.
The vulnerability has been classified as moderate in severity, indicating that while it is not critical, it still poses a risk that should be addressed.
You can use tools like Vulert, which monitors and alerts for open-source vulnerabilities in your software by analyzing the package-lock.json file. You can also check your application against known vulnerabilities using the Vulert playground.
References
Related vulnerabilities
Recent vulnerabilities recorded for openclaw.
Follow Vulert in Google
Get more Vulert vulnerability and dependency-security updates in Google Search and AI results.