OpenClaw SSRF Vulnerability Exposes Internal Resources

The National Vulnerability Database (NVD) reports a critical server-side request forgery (SSRF) vulnerability, CVE-2026-41297, in OpenClaw before version 2026.3.31. This flaw resides in the marketplace plugin download functionality, specifically within the marketplace.ts module, which fails to restrict redirect destinations during archive downloads.

Attackers can exploit this by crafting malicious requests that leverage unvalidated redirects, allowing them to access internal network resources or redirect to arbitrary external servers. With a CVSS score of 7.6 (HIGH), this vulnerability presents a significant risk for unauthorized information disclosure and potential lateral movement within affected environments. The NVD notes the attack vector is network-based with low attack complexity and requires low privileges, but user interaction is required.

Defenders need to understand the implications of SSRF: it’s not just about data exfiltration. An attacker can use this as a pivot point to scan internal networks, interact with internal services that are not internet-facing, or even bypass firewalls. This vulnerability essentially turns the OpenClaw server into an unwitting proxy for the attacker.