Is there a patch available for CVE-2026-41302?

Yes, a patch is available for CVE-2026-41302. Update the affected software to the latest version immediately.

Openclaw CVE-2026-41302

Q: What is the CVSS score of CVE-2026-41302?

CVE-2026-41302 has a CVSS 4.0 base score of 4.8 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-04-21 disclosure@vulncheck.com

SSRF Openclaw

4.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

4.8 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:H/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Scope

Lifecycle Timeline

Patch released

Apr 21, 2026 - 02:30 nvd

Patch available

Analysis Generated

Apr 21, 2026 - 00:40 vuln.today

Analysis Generated

Apr 21, 2026 - 00:22 vuln.today

CVE Published

Apr 21, 2026 - 00:16 nvd

MEDIUM 4.8

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

1 npm packages depend on openclaw (1 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.31.

DescriptionCVE.org

OpenClaw before 2026.3.31 contains a server-side request forgery vulnerability in the marketplace plugin download functionality that allows remote attackers to make arbitrary network requests. Attackers can exploit unguarded fetch() calls to access internal resources or interact with external services on behalf of the affected system.

AnalysisAI

OpenClaw before version 2026.3.31 contains a server-side request forgery (SSRF) vulnerability in the marketplace plugin download functionality, where unguarded fetch() calls allow authenticated users with user interaction to make arbitrary network requests on behalf of the affected system. Remote attackers can access internal resources or interact with external services, potentially disclosing sensitive data or compromising internal infrastructure; no public exploit code or active exploitation has been identified at time of analysis.

Technical ContextAI

The vulnerability resides in OpenClaw's marketplace plugin download feature, which implements HTTP client functionality (fetch() calls) without proper validation or restriction on request destinations. This classic SSRF vulnerability (CWE-918) occurs when user-supplied input to network request operations is not sanitized, allowing attackers to manipulate the target URL. The marketplace plugin likely processes download URLs from untrusted sources or user input without enforcing allowlists of permitted destinations, enabling requests to internal IP ranges (127.0.0.1, 10.0.0.0/8, 169.254.169.254), localhost services, or arbitrary external systems. The fetch() implementation likely respects HTTP redirects and handles credentials transparently, amplifying the attack surface to include credential theft from internal services.

RemediationAI

Upgrade OpenClaw to version 2026.3.31 or later, which includes patches to the marketplace plugin download functionality that implement proper request validation. The upstream fix is confirmed via GitHub commit 8deb9522f3d2680820588b190adb4a2a52f3670b and security advisory GHSA-9q7v-8mr7-g23p. If immediate upgrade is not feasible, restrict network access from the OpenClaw application process to only explicitly required external endpoints using firewall rules or SELinux/AppArmor policies-deny outbound connections to private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.1, 169.254.169.254) and localhost ports used by internal services. This compensating control will prevent SSRF attacks from reaching internal infrastructure but may degrade functionality if the marketplace legitimately requires access to internal update repositories. Alternative mitigation: disable the marketplace plugin entirely if not actively used, accepting reduced feature availability but eliminating the attack surface. Monitor OpenClaw logs for suspicious download requests to non-whitelisted domains as a detective control.