PT-2026-20952 · Openclaw · Openclaw

P80N-Sec · Published 2026-02-17 · Updated 2026-03-22 · CVE-2026-26322

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.2.14

Description The Gateway tool in OpenClaw accepted a tool-supplied gatewayUrl without sufficient restrictions, potentially causing the OpenClaw host to attempt outbound WebSocket connections to user-specified targets. This requires the ability to invoke tools that accept gatewayUrl overrides. The issue stemmed from tool call paths allowing gatewayUrl overrides to flow into the Gateway WebSocket client without validation, enabling connections to non-gateway endpoints like localhost services, private network addresses, or cloud metadata IPs. In most cases, this results in outbound connection attempts and errors. However, if the target speaks WebSocket and is reachable, further interaction may be possible.

Recommendations Versions prior to 2026.2.14 should be updated to version 2026.2.14 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-26322

GHSA-G6Q9-8FVW-F7RF

Affected Products

Openclaw

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26322.json · Exploit
• https://github.com/openclaw/openclaw/security/advisories/GHSA-g6q9-8fvw-f7rf · Vendor Advisory
• https://github.com/openclaw/openclaw/commit/c5406e1d2434be2ef6eb4d26d8f1798d718713f4 · Patch
• https://osv.dev/vulnerability/CVE-2026-26322 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26322 · Security Note
• https://osv.dev/vulnerability/GHSA-g6q9-8fvw-f7rf · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/releases/tag/v2026.2.14 · Note
• https://twitter.com/bobdrox/status/2024989754031256056 · Twitter Post
• https://twitter.com/transilienceai/status/2025818134830067755 · Twitter Post
• https://twitter.com/Sattyamjjain/status/2035727601671827858 · Twitter Post
• https://t.me/CVEtracker/45202 · Telegram Post
• https://twitter.com/DejaegherJeff/status/2024907748245176574 · Twitter Post