6.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-27488

CVE-2026-27488: OpenClaw hardened cron webhook delivery against SSRF

Affected Packages / Versions

openclaw npm package versions <= 2026.2.17.

Vulnerability

Cron webhook delivery in src/gateway/server-cron.ts used fetch() directly, so webhook targets could reach private/metadata/internal endpoints without SSRF policy checks.

Fix Commit(s)

99db4d13e
35851cdaf

Thanks @Adam55A-code for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-27488

CVE-2026-27488:

6.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.17	2026.2.19

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis of the provided patch 99db4d13e5c139883ef0def9ff963e9273179655 clearly indicates a Server-Side Request Forgery (SSRF) vulnerability within the openclaw package. The vulnerability existed in the src/gateway/server-cron.ts file, specifically within the buildGatewayCronService function. This function was responsible for handling cron job lifecycle events, including webhook notifications upon job completion.

The root cause of the vulnerability was the direct use of the standard fetch API to send a POST request to a webhookTarget.url provided in the cron job's configuration. Since the URL was not sanitized or validated, a malicious user could configure a cron job to send a webhook to an internal IP address or a cloud provider's metadata service, allowing them to probe the internal network or exfiltrate sensitive data.

The patch addresses this vulnerability by replacing the direct call to fetch with a new, custom function named fetchWithSsrFGuard. This new function presumably inspects the target URL and blocks any requests to reserved IP spaces (e.g., 127.0.0.1, 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) or other internal endpoints, thus mitigating the SSRF risk. The vulnerable function is buildGatewayCronService because it contains the flawed logic that is triggered when a cron job with a webhook finishes.

Vulnerable functions

buildGatewayCronService

src/gateway/server-cron.ts

The function `buildGatewayCronService` sets up a listener for cron job 'finished' events. Within this listener, it handles webhook deliveries by making an HTTP POST request. The vulnerability lies in the direct use of the `fetch` function with `webhookTarget.url`, which is a user-configurable URL from the cron job settings. There was no validation to prevent this URL from pointing to internal or private network addresses. This allowed an attacker to craft a cron job with a webhook URL targeting an internal service, leading to a Server-Side Request Forgery (SSRF) vulnerability. The patch replaces the direct `fetch` call with a guarded function, `fetchWithSsrFGuard`, to block requests to private destinations.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

6.9

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-27488: OpenClaw hardened cron webhook delivery against SSRF

Affected Packages / Versions

Vulnerability

Fix Commit(s)

CVE-2026-27488:

6.9

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

CVE-2026-27488: OpenClaw hardened cron webhook delivery against SSRF

Affected Packages / Versions

Vulnerability

Fix Commit(s)

Technical Details

6.9

6.9

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI