What is the CVSS score of CVE-2026-27488?

CVE-2026-27488 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of AI / ML are affected by CVE-2026-27488?

OpenClaw AI assistant installations in versions 2026.2.17 and below contain a server-side request forgery (SSRF) vulnerability in webhook delivery that allows attackers to access internal metadata…. A patch is available.

How to fix or mitigate CVE-2026-27488?

Within 24 hours: identify all OpenClaw deployments and their versions in your environment; isolate any version 2026.2.17 or below from production if feasible. Within 7 days: apply the available security patch to all affected instances and validate successful deployment. Within 30 days: conduct a security audit of webhook configurations and review logs for suspicious webhook activity dating back 90 days to identify potential exploitation.

AI / ML CVE-2026-27488

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-02-21 security-advisories@github.com

GHSA-w45g-5746-x9fp

SSRF AI / ML Openclaw

7.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

Patch released

Feb 23, 2026 - 20:41 nvd

Patch available

CVE Published

Feb 21, 2026 - 10:16 nvd

HIGH 7.3

DescriptionGitHub Advisory

OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targets can reach private/metadata/internal endpoints without SSRF policy checks. This issue was fixed in version 2026.2.19.

AnalysisAI

OpenClaw versions 2026.2.17 and earlier allow unauthenticated remote attackers to access internal and metadata endpoints through unprotected cron webhook delivery mechanisms that lack SSRF validation. An attacker can exploit this to reach private services and endpoints that should be restricted, potentially leading to information disclosure or lateral movement within the infrastructure. A patch is available in version 2026.2.19.

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). Affects Openclaw. OpenClaw is a personal AI assistant. In versions 2026.2.17 and below, Cron webhook delivery in src/gateway/server-cron.ts uses fetch() directly, so webhook targets can reach private/metadata/internal endpoints without SSRF policy checks. This issue was fixed in version 2026.2.19.