CVE-2026-41361 | THREATINT

Description

OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.

PUBLISHED Reserved 2026-04-20 | Published 2026-04-23 | Updated 2026-04-24 | Assigner VulnCheck

MEDIUM: 5.1CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N

HIGH: 7.1CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N

Problem types

CWE-184: Incomplete List of Disallowed Inputs

Product status

Default status

unaffected

Any version before 2026.3.28

affected

2026.3.28 (semver)

unaffected

Credits

Nicky (@nicky-cc) of Tencent zhuque Lab reporter

References

github.com/...enclaw/security/advisories/GHSA-g86v-f9qv-rh6m (GitHub Security Advisory (GHSA-g86v-f9qv-rh6m)) vendor-advisory

www.vulncheck.com/...uard-bypass-via-ipv6-special-use-ranges (VulnCheck Advisory: OpenClaw < 2026.3.28 - SSRF Guard Bypass via IPv6 Special-Use Ranges) third-party-advisory

cve.org (CVE-2026-41361)

nvd.nist.gov (CVE-2026-41361)

Download JSON