Which versions of Openclaw are affected by EUVD-2026-12728?

CVE-2026-22181 presents moderate security risk, a server-side request forgery vulnerability rated CVSS 6.1. Users could be tricked into performing unintended actions.. A patch is available.

How to fix or mitigate EUVD-2026-12728?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Vendor patch is available.

Openclaw EUVD-2026-12728

Q: What is the CVSS score of EUVD-2026-12728?

EUVD-2026-12728 has a CVSS 4.0 base score of 6.1 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-22181 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-18 VulnCheck

GHSA-8mvx-p2r9-r375

SSRF Openclaw

6.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.1 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 18, 2026 - 02:30 euvd

EUVD-2026-12728

Analysis Generated

Mar 18, 2026 - 02:30 vuln.today

Patch released

Mar 18, 2026 - 02:30 nvd

Patch available

CVE Published

Mar 18, 2026 - 01:34 nvd

MEDIUM 6.1

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 npm packages depend on openclaw (4 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.2.

DescriptionCVE.org

OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environment proxy variables are configured. When HTTP_PROXY, HTTPS_PROXY, or ALL_PROXY environment variables are present, attacker-influenced URLs can be routed through proxy behavior instead of pinned-destination routing, enabling access to internal targets reachable from the proxy environment.

AnalysisAI

OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability that allows authenticated attackers to circumvent SSRF (Server-Side Request Forgery) protections by exploiting environment proxy variable configuration. When HTTP_PROXY, HTTPS_PROXY, or ALL_PROXY environment variables are present, attackers can route malicious URLs through proxy mechanisms instead of pinned-destination routing, enabling access to internal resources that should be protected. The vulnerability requires low privilege (PR:L) and non-interactive attack (UI:N) with medium attack complexity (AC:H), resulting in high confidentiality impact (C:H) and lesser integrity and availability impact. A patch is available from the vendor.

Technical ContextAI

This vulnerability exploits a design flaw in OpenClaw's strict URL fetch implementation (CWE-918: Server-Side Request Forgery), which is an OWASP Top 10 category. The root cause stems from improper handling of environment proxy variables in the context of DNS pinning controls. When developers configure HTTP_PROXY, HTTPS_PROXY, or ALL_PROXY environment variables—commonly used for outbound proxy routing—the library fails to maintain DNS pinning constraints. Instead of enforcing destination pinning (a security control that forces requests to specific pre-approved hosts), the implementation allows the proxy configuration to override this control, enabling attackers to redirect connections through attacker-controlled or internal proxy infrastructure. The affected product is identified via CPE cpe:2.3:a:openclaw:openclaw:*:*:*:*:*:*:*:* and impacts all versions from 0 up to (but not including) 2026.3.2.

RemediationAI

Upgrade OpenClaw to version 2026.3.2 or later immediately, as a patch is available from the vendor (see commit 345abf0b2e0f43b0f229e96f252ebf56f1e5549e at https://github.com/openclaw/openclaw/commit/345abf0b2e0f43b0f229e96f252ebf56f1e5549e). Until patching is completed, implement the following interim controls: disable or unset environment proxy variables (HTTP_PROXY, HTTPS_PROXY, ALL_PROXY) in any deployment contexts where OpenClaw performs strict URL fetching on untrusted input, use explicit proxy configuration through application settings rather than environment variables to maintain SSRF controls, enforce network segmentation to restrict OpenClaw instances from reaching sensitive internal resources, and audit proxy configurations in current deployments to identify at-risk instances. Additionally, monitor execution contexts where authenticated users can influence URL parameters passed to OpenClaw's fetch functions.