PT-2026-25120 · Npm · Openclaw

Published 2026-03-02 · Updated 2026-03-02

OSV

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Summary

Gemini web search citation redirect resolution used a private-network-allowing SSRF policy. A citation URL redirect could target loopback/private/internal destinations and be fetched by the gateway.

Impact

An attacker who can influence citation redirect targets could trigger internal-network requests from the OpenClaw host.

Fix

Citation redirect resolution now uses strict/default SSRF policy (no private-network override), blocking localhost/private/internal redirect targets.

Affected and Patched Versions

• Affected: <= 2026.2.26
• Patched: 2026.3.1

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

GHSA-G99V-8HWM-G76G

Affected Products

Openclaw

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-31989 · Security Note
• https://osv.dev/vulnerability/GHSA-g99v-8hwm-g76g · Vendor Advisory
• https://github.com/openclaw/openclaw · Note
• https://github.com/openclaw/openclaw/security/advisories/GHSA-g99v-8hwm-g76g · Note
• https://vulncheck.com/advisories/openclaw-server-side-request-forgery-via-web-search-citation-redirect · Note