Описание
OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.
Уязвимые конфигурации
Конфигурация 1Версия до 2026.3.28 (исключая)
cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 10%
0.00202
Низкий
7.1 High
CVSS3
Дефекты
CWE-184
CWE-918
Связанные уязвимости
CVSS3: 7.1
github
5 месяцев назад
OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.
EPSS
Процентиль: 10%
0.00202
Низкий
7.1 High
CVSS3
Дефекты
CWE-184
CWE-918