Loading vulnerability…
SSRF in OpenClaw web_search citation redirect resolution
CVE-2026-32902 is a server-side request forgery vulnerability in OpenClaw before version 2026.3.1. The flaw exists in web_search citation redirect resolution, where OpenClaw follows or resolves citation redirect targets in a way that can be influenced by an attacker. By controlling or influencing the redirect target associated with a citation, an attacker can cause the OpenClaw gateway host to issue requests to arbitrary destinations, including private or otherwise non-publicly reachable network addresses.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to induce the OpenClaw gateway host to make outbound requests to attacker-chosen internal or private-network destinations. This can enable internal network probing, access to services not directly exposed to the attacker, and potential retrieval or interaction with sensitive internal resources depending on network reachability and the behavior of the targeted services.
If you can’t patch tonight, do this now.
As a temporary mitigation, restrict the OpenClaw gateway host's outbound network access to only required external destinations, and block access to RFC1918, loopback, link-local, and cloud metadata address ranges from the application context. Implement strict allowlisting for redirect destinations, disable or limit automatic redirect resolution in web_search citation handling if feasible, and add monitoring for anomalous outbound requests originating from the gateway host.
Patch, then assume compromise.
Upgrade OpenClaw to version 2026.3.1 or later, which is the first version indicated as not affected. Review the web_search citation redirect resolution logic to ensure redirect targets are strictly validated and that requests to private, loopback, link-local, and otherwise restricted address spaces are blocked.
No public exploits tracked yet. Mallory keeps watching.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.