Loading vulnerability…
SSRF in OpenClaw fal provider image-generation-provider.ts
CVE-2026-34504 is a server-side request forgery vulnerability affecting OpenClaw versions prior to 2026.3.28. The flaw is in the fal provider component, specifically image-generation-provider.ts, where image download fetches are not sufficiently guarded. A malicious or compromised fal relay can cause the application to fetch attacker-influenced internal URLs through the image generation pipeline, enabling retrieval of internal service metadata and internal HTTP responses that should not be externally reachable.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to induce the vulnerable OpenClaw server to make requests to internal or otherwise restricted network resources. This can expose internal service metadata and response content through the image pipeline, and may expand attacker reach across trust boundaries depending on what internal endpoints are accessible from the server. The provided scoring history indicates integrity, confidentiality, and availability impact with changed scope in the updated CVSS v3.1 assessment.
If you can’t patch tonight, do this now.
If immediate upgrade is not possible, restrict or disable the vulnerable fal image-generation workflow where feasible. Enforce strict outbound request controls from the OpenClaw server, including network egress filtering and deny-by-default access to internal metadata services and sensitive internal address ranges. Validate and allowlist remote image sources, and prevent the application from following attacker-controlled URLs returned by relays or upstream services.
Patch, then assume compromise.
Upgrade OpenClaw to version 2026.3.28 or later, which is the first version not reported as affected. Review the fix associated with the referenced OpenClaw commit and GitHub security advisory, and ensure image download behavior in the fal provider is constrained to trusted destinations only.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.