What is the CVSS score of CVE-2026-31989?

CVE-2026-31989 has a CVSS 3.1 base score of 7.4 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L. EPSS exploitation probability: 0.0%.

Which versions of Openclaw are affected by CVE-2026-31989?

OpenClaw servers running versions prior to 2026.3.1 are vulnerable to attacks that could allow authenticated users to access internal company systems and sensitive data through malicious citation…. A patch is available.

How to fix or mitigate CVE-2026-31989?

Within 24 hours: inventory all OpenClaw deployments and their current versions; audit user access logs for suspicious citation redirect activity. Within 7 days: implement network segmentation to restrict OpenClaw server outbound access to only necessary external services; deploy WAF rules to block malicious citation redirect payloads; disable the web_search citation feature if not business-critical. Within 30 days: monitor vendor communications closely for patch availability; conduct security review of all accounts with OpenClaw access; perform penetration testing of citation redirect functionality.

Openclaw CVE-2026-31989

EUVD-2026-13017 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-19 VulnCheck

GHSA-g99v-8hwm-g76g

SSRF Openclaw

7.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.4 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 19, 2026 - 01:30 euvd

EUVD-2026-13017

Analysis Generated

Mar 19, 2026 - 01:30 vuln.today

CVE Published

Mar 19, 2026 - 01:00 nvd

HIGH 7.4

DescriptionCVE.org

OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a private-network-allowing SSRF policy. An attacker who can influence citation redirect targets can trigger internal-network requests from the OpenClaw host to loopback, private, or internal destinations.

AnalysisAI

OpenClaw versions prior to 2026.3.1 contain a server-side request forgery (SSRF) vulnerability in the web_search citation redirect resolution component that permits requests to private network ranges. Authenticated attackers with low privileges can manipulate citation redirect targets to force the OpenClaw server to make requests to loopback addresses, private networks, or internal infrastructure, potentially accessing sensitive internal services or data. The vulnerability has a CVSS score of 7.4 with changed scope, indicating potential lateral movement beyond the vulnerable component.

Technical ContextAI

This vulnerability affects OpenClaw (cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:*), specifically the web search citation redirect resolution mechanism. The root cause is CWE-918 (Server-Side Request Forgery), where the application fails to properly validate or restrict the destination of outbound HTTP requests initiated through citation redirects. The implementation uses a permissive SSRF policy that explicitly allows requests to private network ranges (RFC 1918 addresses like 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), loopback interfaces (127.0.0.0/8), and potentially link-local addresses. This design flaw enables attackers to abuse the server as a proxy to interact with internal services that should not be accessible from external networks, bypassing network segmentation and firewall controls.

RemediationAI

Upgrade OpenClaw to version 2026.3.1 or later, which addresses the SSRF vulnerability in citation redirect resolution as documented in the GitHub Security Advisory at https://github.com/openclaw/openclaw/security/advisories/GHSA-g99v-8hwm-g76g. As an interim mitigation until patching is completed, implement network-level controls to restrict outbound connections from the OpenClaw server to only necessary external destinations, blocking access to RFC 1918 private address ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), loopback addresses (127.0.0.0/8), link-local addresses (169.254.0.0/16), and cloud metadata endpoints (169.254.169.254). Additionally, review and restrict authenticated user permissions to minimize the number of accounts that can influence citation redirect targets, and implement egress filtering via web application firewall or proxy to validate and sanitize outbound request destinations based on an allowlist of legitimate citation sources.