OpenClaw betroffen von SSRF via ungeschütztem Bilddownload im fal provider

The SSRF vulnerability in OpenClaw's image generation provider allows an attacker who has compromised a fal relay to initiate requests to internal resources that are normally inaccessible from the outside. This could lead to the exposure of sensitive data, such as internal service responses or metadata. An attacker could potentially leverage this to map the internal network, identify other services, or even gain access to protected resources. The impact is amplified if the internal services exposed contain sensitive information or are critical to the application's functionality. While the CVSS score is LOW, the potential for data exposure and internal reconnaissance warrants prompt remediation.

Organizations utilizing OpenClaw for image generation and processing are at risk, particularly those with complex internal network architectures or those who have not implemented robust network segmentation. Environments where the fal relay has broad access to internal services are at higher risk. Shared hosting environments using OpenClaw should be especially vigilant.

• nodejs / server:

  journalctl -u openclaw | grep -i "fal provider" -i "image fetch"

• generic web:

  curl -I <openclaw_endpoint> | grep -i "X-Powered-By"

• generic web:

  grep -r "fal: guard image fetches" /path/to/openclaw/source/code

1. 2026-04-01Disclosure

   disclosure

1. Reserviert2026-03-30
2. Veröffentlicht2026-04-01
3. Geändert2026-04-06
4. EPSS aktualisiert2026-04-08

The primary mitigation for CVE-2026-34504 is to upgrade OpenClaw to version 2026.3.28 or later. This version includes a fix that guards image fetches, preventing the SSRF vulnerability. If upgrading is not immediately feasible, consider implementing temporary workarounds such as restricting outbound network access from the fal relay to only necessary destinations. Review and tighten access controls for internal services that might be exposed through the image pipeline. Monitor network traffic for unusual outbound requests originating from the fal relay. After upgrading, confirm the fix by attempting to trigger an image fetch with an internal URL and verifying that the request is properly blocked.