PT-2026-27236 · Openclaw · Openclaw

Tdjackey

·

CVE-2026-32902

·

Publicado

2026-03-23

·

Atualizado

2026-03-24

CVSS v3.1

8.3

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.1
Description The software contains a server-side request forgery issue in the web search citation redirect resolution functionality. This allows attackers to target private network destinations. An attacker who can influence citation redirect targets can initiate requests to internal network locations from the OpenClaw gateway host.
Recommendations Update to version 2026.3.1 or later.

Correção

SSRF

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-32902

Produtos afetados

Openclaw