OpenClaw hardened cron webhook delivery against SSRF

高危 7.3CVE-2026-27488 · GHSA-w45g-5746-x9fp · Published 21/02/2026 · updated 17/06/2026

要点

CVE-2026-27488 是影响 openclaw (openclaw), openclaw 的高危 (CVSS 7.3)漏洞。
未来 30 天内被利用的概率（EPSS）：0.37%，高于 30.9% 的漏洞。
修复：升级到 2026.2.19 或更高版本。

Package	Affected versions	Patched versions
openclaw openclaw	`≤ 2026.2.17`	No fix yet
openclaw npm	`< 2026.2.19`	`2026.2.19`

Description

Affected Packages / Versions

openclaw npm package versions <= 2026.2.17.

Vulnerability

Cron webhook delivery in src/gateway/server-cron.ts used fetch() directly, so webhook targets could reach private/metadata/internal endpoints without SSRF policy checks.

Fix Commit(s)

99db4d13e
35851cdaf

Thanks @Adam55A-code for reporting.

NVD description

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targets can reach private/metadata/internal endpoints without SSRF policy checks. This issue was fixed in version 2026.2.19.

References

openclaw/openclaw security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2026-27488 · ADVISORY
openclaw/openclaw commit 99db4d1 · WEB
openclaw/openclaw · PACKAGE
openclaw/openclaw release v2026.2.19 · WEB

openclaw 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

openclaw

≤ 2026.2.17

No fix yet

openclaw

npm

< 2026.2.19

2026.2.19

Description

Affected Packages / Versions

openclaw npm package versions <= 2026.2.17.

Vulnerability

Cron webhook delivery in src/gateway/server-cron.ts used fetch() directly, so webhook targets could reach private/metadata/internal endpoints without SSRF policy checks.

Fix Commit(s)

99db4d13e
35851cdaf

Thanks @Adam55A-code for reporting.

NVD description

openclaw 的其他漏洞

查看全部 →