CVE-2026-100576: OpenClaw before 2026.8.1 SSRF via Browser Wait Predicates
OpenClaw versions before 2026.8.1 contain a server-side request forgery vulnerability in browser wait predicates that allows attackers to bypass SSRF protections by reaching blocked destinations. Attackers can use the wait --fn function against an existing browser session to request loopback or private destinations without navigation checks applied to other browser actions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attacker needs low-privileged access and access to an existing browser session. Exploitation does not require user interaction and can be performed remotely.
Which destinations can an attacker reach?
The vulnerable wait --fn function can be used to request loopback or private destinations that are otherwise blocked by SSRF protections.
Are all browser actions affected?
The issue is specifically in browser wait predicates using wait --fn. Navigation checks applied to other browser actions do not protect requests made through this function.
What is the available remediation?
Upgrade OpenClaw to version 2026.8.1 or later. Versions before 2026.8.1 are affected.