Is there a patch available for EUVD-2026-21116?

Yes, a patch is available for EUVD-2026-21116. Update the affected software to the latest version immediately.

Openclaw EUVD-2026-21116

Q: What is the CVSS score of EUVD-2026-21116?

EUVD-2026-21116 has a CVSS 4.0 base score of 5.3 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-35629 MEDIUM

Server-Side Request Forgery (SSRF) (CWE-918)

2026-04-09 VulnCheck

GHSA-8j7f-g9gv-7jhc

GHSA-rhfg-j8jq-7v2h

SSRF Openclaw

5.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Apr 09, 2026 - 21:45 euvd

EUVD-2026-21116

Analysis Generated

Apr 09, 2026 - 21:45 vuln.today

Patch released

Apr 09, 2026 - 21:45 nvd

Patch available

CVE Published

Apr 09, 2026 - 21:27 nvd

MEDIUM 5.3

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

3 npm packages depend on openclaw (3 direct, 0 indirect)

Ecosystem-wide dependent count for version 2026.3.28.

DescriptionCVE.org

OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks. Attackers can exploit unprotected fetch() calls against configured endpoints to rebind requests to blocked internal destinations and access restricted resources.

AnalysisAI

Server-side request forgery (SSRF) in OpenClaw before version 2026.3.25 allows authenticated attackers to bypass configured endpoint protections through unguarded fetch() calls in channel extensions, enabling rebinding of requests to internal resources and potential unauthorized access to restricted services. The vulnerability affects multiple channel extensions that fail to properly validate or restrict base URL usage, with a CVSS score of 5.3 reflecting moderate risk due to required authentication and limited initial impact scope.

Technical ContextAI

OpenClaw's channel extension architecture implements configurable base URLs for remote endpoint communication via fetch() operations. The underlying issue (CWE-918: Server-Side Request Forgery) stems from insufficient input validation and URL sanitization when constructing requests to configured endpoints. Attackers with authenticated access can manipulate or exploit the base URL configuration to redirect requests toward internal IP ranges, localhost services, or cloud metadata endpoints that would normally be blocked by network policies or firewall rules. The vulnerability exists in the fetch() call mechanism itself, which lacks proper validation to ensure requests honor intended security boundaries.

RemediationAI

Upgrade OpenClaw to version 2026.3.25 or later, which contains the patched code addressing the SSRF vulnerability in channel extensions. The fix was committed to the vendor repository as noted in the GitHub security advisory (GHSA-rhfg-j8jq-7v2h) and commit f92c92515bd439a71bd03eb1bc969c1964f17acf. Organizations unable to immediately patch should implement network-layer controls restricting outbound access from OpenClaw instances to only explicitly required external endpoints and internal services, using firewall rules or security group policies to block SSRF-prone destinations such as 169.254.169.254 (cloud metadata), 127.0.0.1, and private IP ranges unless operationally necessary. Review channel extension configurations for any suspicious or overly-permissive base URLs that could be exploited by malicious users.