OpenClaw before 2026.3.28 contains an SSRF guard bypass vulnerability that fails to block four IPv6 special-use ranges. Attackers can exploit this by crafting URLs targeting internal or non-routable IPv6 addresses to bypass SSRF protections.
Exploitability
AV:NAC:HAT:NPR:LUI:NVulnerable System
VC:NVI:LVA:NSubsequent System
SC:HSI:LSA:N5.1/CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:L/SA:NOther