6.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44116

CVE-2026-44116: OpenClaw validates Zalo outbound photo URLs through the SSRF guard

Summary

Zalo outbound photo URLs are validated through the SSRF guard.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.4.21
Fixed version: 2026.4.22

Impact

The Zalo plugin could forward an attacker-controlled outbound photo URL to the Zalo Bot API without first applying OpenClaw's SSRF validation policy.

Fix

Zalo sendPhoto now parses and validates outbound photo URLs with the shared SSRF hostname policy before posting to Zalo, and media-reply paths route through the guarded outbound media helpers.

Fix Commit(s)

a65eb1b864b7630c1242a82de9e5799b80583c3f

Verification

The fix commit is contained in the public v2026.4.22 tag.
openclaw@2026.4.22 is published on npm and the compiled package contains the fix.
Focused regression coverage for this path passed before publication.

OpenClaw thanks @foodlook for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44116

CVE-2026-44116:

6.9

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.4.21	2026.4.22

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Server-Side Request Forgery (SSRF) located in the Zalo integration of the OpenClaw application. The core of the issue lies in the sendPhoto function within extensions/zalo/src/api.ts, which failed to validate outbound photo URLs before forwarding them to the Zalo Bot API. An attacker could provide a URL to an internal service, and the OpenClaw server would make a request to that service.

The patch in commit a65eb1b864b7630c1242a82de9e5799b80583c3f rectifies this by introducing validation steps inside the sendPhoto function. Specifically, it now parses the URL to ensure it uses HTTP or HTTPS and then validates the hostname against a defined SSRF policy using resolvePinnedHostnameWithPolicy.

The function sendPhotoZalo in extensions/zalo/src/send.ts is also identified as a vulnerable function because it is the entry point that gathers the malicious URL and calls sendPhoto. Therefore, both sendPhoto and sendPhotoZalo would be present in the runtime profile when the vulnerability is triggered.

Vulnerable functions

sendPhoto

extensions/zalo/src/api.ts

This function was vulnerable because it directly passed the `photo` URL from the `params` argument to the `callZaloApi` function without any validation. This allowed an attacker to specify an arbitrary URL, including those pointing to internal network resources, leading to a Server-Side Request Forgery (SSRF) vulnerability. The fix involves adding URL parsing and validation using `resolvePinnedHostnameWithPolicy` before the API call is made.

sendPhotoZalo

extensions/zalo/src/send.ts

This function serves as a wrapper that constructs the parameters for and calls the vulnerable `sendPhoto` function. It takes a `photoUrl` as input, which could be controlled by a user, and passes it down to `sendPhoto`. As such, it is a key part of the execution flow for the vulnerability and would appear in a stack trace during exploitation.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

6.9

-

Basic Information

Basic Information

Concerned about an active attack path?

CVE-2026-44116: OpenClaw validates Zalo outbound photo URLs through the SSRF guard

Summary

Affected Packages / Versions

Impact

Fix

Fix Commit(s)

Verification

CVE-2026-44116:

6.9

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

CVE-2026-44116: OpenClaw validates Zalo outbound photo URLs through the SSRF guard

Summary

Affected Packages / Versions

Impact

Fix

Fix Commit(s)

Verification

6.9

6.9

Basic Information

Basic Information

Technical Details

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI