OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists

MEDIUM 6.5CVE-2026-32037 · GHSA-w76h-8m22-hpgh · Published 19/03/2026 · updated 17/06/2026

In short

CVE-2026-32037 is a MEDIUM (CVSS 6.5) vulnerability affecting openclaw (openclaw), openclaw.
Chance of exploitation in the next 30 days (EPSS): 0.18%, higher than 7.5% of all vulnerabilities.
Fix: update to 2026.2.22 or later.

Package	Affected versions	Patched versions
openclaw openclaw	`< 2026.2.22`	`2026.2.22`
openclaw npm	`< 2026.2.22`	`2026.2.22`

Description

Summary

In OpenClaw MSTeams media download flows, redirect handling could bypass configured mediaAllowHosts checks in specific attachment paths. Redirect chains were not consistently constrained to allowlisted targets before accepting fetched content.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.21-2 (latest published at triage time)
Fixed in: 2026.2.22 (planned next release)

Impact

Attackers able to supply or influence attachment URLs could force redirect chains to non-allowlisted targets, weakening SSRF boundary controls for MSTeams media ingestion.

Fix Commit(s)

73d93dee64127a26f1acd09d0403b794cdeb4f5c
b34097f62df9d1960cc22600269cd3f3284e2124

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.22). Once that npm release is published, this advisory can be published without further version-field edits.

OpenClaw thanks @tdjackey for reporting.

NVD description

OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads. Attackers can supply or influence attachment URLs to force redirects to non-allowlisted targets, bypassing SSRF boundary controls.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-32037 · ADVISORY
openclaw/openclaw commit 73d93de · WEB
openclaw/openclaw commit b34097f · WEB
openclaw/openclaw · PACKAGE
vulncheck.com/advisories/openclaw-redirect-chain-bypass-of-media-host-allowlist-in-msteams-attachment-handling · WEB

More vulnerabilities in openclaw

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

< 2026.2.22

2026.2.22

openclaw

npm

< 2026.2.22

2026.2.22

Description

Summary

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.21-2 (latest published at triage time)
Fixed in: 2026.2.22 (planned next release)

Impact

Attackers able to supply or influence attachment URLs could force redirect chains to non-allowlisted targets, weakening SSRF boundary controls for MSTeams media ingestion.

Fix Commit(s)

73d93dee64127a26f1acd09d0403b794cdeb4f5c
b34097f62df9d1960cc22600269cd3f3284e2124

Release Process Note

patched_versions is pre-set to the planned next release (2026.2.22). Once that npm release is published, this advisory can be published without further version-field edits.

OpenClaw thanks @tdjackey for reporting.

NVD description

More vulnerabilities in openclaw

See all →