OpenClaw < 2026.3.2 - DNS Pinning Bypass via Environment Proxy Configuration in web_fetch

The core of this vulnerability lies in OpenClaw's URL fetch path handling. Normally, OpenClaw should pin requests to specific, trusted destinations. However, when HTTPPROXY, HTTPSPROXY, or ALL_PROXY environment variables are present, the application incorrectly routes attacker-controlled URLs through the configured proxy. This effectively bypasses the intended SSRF protections. An attacker could leverage this to scan internal networks, access sensitive data residing on internal servers (databases, APIs, configuration files), or even potentially trigger remote code execution if internal services are vulnerable and accessible via the proxy. The blast radius extends to any internal resources reachable from the proxy environment.

Organizations deploying OpenClaw in environments where proxy servers are used for outbound traffic are particularly at risk. This includes applications utilizing OpenClaw for data fetching or integration with internal services. Shared hosting environments where environment variables are easily configurable also present a heightened risk.

• nodejs / server:

  ps aux | grep claw | grep -i proxy

• nodejs / server:

  echo $HTTP_PROXY
echo $HTTPS_PROXY
echo $ALL_PROXY

• generic web: Review OpenClaw configuration files for any references to proxy settings or environment variables related to proxy usage. • generic web: Monitor access logs for requests to unusual internal IP addresses or hostnames originating from the OpenClaw application.

1. 2026-03-18Disclosure

   disclosure

1. Reserviert2026-01-06
2. Veröffentlicht2026-03-18
3. Geändert2026-03-25
4. EPSS aktualisiert2026-03-25

The primary mitigation for CVE-2026-22181 is to upgrade OpenClaw to version 2026.3.2 or later, which contains the fix. If upgrading immediately is not feasible, consider temporarily removing or disabling the HTTPPROXY, HTTPSPROXY, and ALL_PROXY environment variables. This will prevent the proxy-based routing and restore the intended pinned-destination behavior, though it may impact legitimate proxy usage. Implement strict network segmentation to limit the potential impact of a successful SSRF attack. Monitor proxy logs for unusual or unexpected outbound requests originating from the OpenClaw application.