CVE-2026-22181: SSRF in OpenClaw via DNS Pinning Bypass

The core of this vulnerability lies in OpenClaw's URL fetch path handling. Normally, OpenClaw should pin requests to specific, trusted destinations. However, when HTTPPROXY, HTTPSPROXY, or ALL_PROXY environment variables are present, the application incorrectly routes attacker-controlled URLs through the configured proxy. This effectively bypasses the intended SSRF protections. An attacker could leverage this to scan internal networks, access sensitive data residing on internal servers (databases, APIs, configuration files), or even potentially trigger remote code execution if internal services are vulnerable and accessible via the proxy. The blast radius extends to any internal resources reachable from the proxy environment.

1. Reserved2026-01-06
2. Published2026-03-18
3. Modified2026-03-25
4. EPSS updated2026-03-25

The primary mitigation for CVE-2026-22181 is to upgrade OpenClaw to version 2026.3.2 or later, which contains the fix. If upgrading immediately is not feasible, consider temporarily removing or disabling the HTTPPROXY, HTTPSPROXY, and ALL_PROXY environment variables. This will prevent the proxy-based routing and restore the intended pinned-destination behavior, though it may impact legitimate proxy usage. Implement strict network segmentation to limit the potential impact of a successful SSRF attack. Monitor proxy logs for unusual or unexpected outbound requests originating from the OpenClaw application.