8.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-43526

CVE-2026-43526: OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling

OpenClaw before 2026.4.12 contains a server-side request forgery vulnerability in QQBot reply media URL handling that allows attackers to fetch arbitrary content. Attackers can exploit this by providing malicious media URLs that trigger SSRF requests, with fetched bytes subsequently re-uploaded through the channel.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-43526

CVE-2026-43526:

8.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.12	2026.4.12

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the getImageSizeFromUrl function within the extensions/qqbot/src/utils/image-size.ts file of the OpenClaw application. The function was responsible for fetching image dimensions from a URL. The original implementation used a standard fetch call without any validation or sanitization of the provided URL. This allowed an attacker to supply a URL pointing to an internal network resource, leading to a Server-Side Request Forgery (SSRF) vulnerability. The server would then fetch content from the internal URL and potentially re-upload it, exposing internal data or services.

The patch applied in commit 08ae021d1f42905a85a550813c0d95169b171a6c addresses this issue by replacing the raw fetch with a new fetchRemoteMedia function. This new function incorporates an SSRF policy that blocks requests to private, reserved, loopback, and other sensitive IP ranges, thus mitigating the vulnerability. A subsequent commit, ddb7a8dd80b8d5dd04aafa44ce7a4354b568bb2d, further hardens the fix by expanding the hostname allowlist for media fetching.

Vulnerable functions

getImageSizeFromUrl

extensions/qqbot/src/utils/image-size.ts

The function `getImageSizeFromUrl` was vulnerable to Server-Side Request Forgery (SSRF) because it used a raw `fetch()` call to retrieve image dimensions from a URL provided in a QQBot message. An attacker could craft a message with a URL pointing to an internal or sensitive network resource, causing the server to make a request to that resource. The fix replaces the unsafe `fetch()` with a guarded `fetchRemoteMedia()` function that implements an SSRF policy, preventing requests to private or reserved IP addresses.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.