CVE-2026-100577: OpenClaw before 2026.8.1 Server-Side Request Forgery via Video Asset
OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by providers, allowing server-side requests to private destinations. A malicious or compromised provider can return private or loopback URLs to cause the CLI to make requests to internal services accessible from the OpenClaw host.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OpenClawto a version that resolves this vulnerability.Fixed in 2026.8.1
Event History
Frequently Asked Questions
Which deployments are exposed?
OpenClaw installations running a version earlier than 2026.8.1 are affected when the CLI processes video asset URLs returned by a provider. The resulting requests originate from the OpenClaw host and can reach private or loopback destinations accessible to that host.
What must an attacker control to exploit this issue?
An attacker needs a malicious or compromised provider capable of returning a video asset URL. They can supply a private or loopback URL that causes the CLI to request an internal service.
How can I determine whether I need to remediate?
Check the installed OpenClaw version. Versions before 2026.8.1 are affected; updating to 2026.8.1 or later addresses the missing validation described in the advisory.