CVE-2026-100577 OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset
A malicious provider can return private URLs, causing the OpenClaw CLI to make requests to internal services, enabling access to internal resources.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-100577?
CVE-2026-100577 is a medium-severity server-side request forgery vulnerability in OpenClaw, published on 26 Sep 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the OpenClaw host.
Weakness: CWE-918
Which versions are affected by CVE-2026-100577?
How do I fix CVE-2026-100577?
Upgrade to a fixed version.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-100577 being exploited?
There is no known exploitation of CVE-2026-100577 in the wild and no public exploit code.
Sources
Also known as GHSA-3qmc-rwv9-q36h, GHSA-fvxr-9g24-x3hf, MINI-f79p-v9gm-74pv.