6.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44117

CVE-2026-44117: OpenClaw: QQBot direct media upload skipped URL SSRF validation

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: < 2026.4.20
Patched version: 2026.4.20

Impact

The QQBot direct-upload media path could forward attacker-controlled image URLs without applying the SSRF validation used by the local download path. This could make configured QQBot media delivery request or relay URLs the operator did not intend to allow.

The affected path is limited to QQBot outbound media handling and does not expose arbitrary local files. Severity is low.

Fix

OpenClaw now validates QQBot direct-upload media URLs before uploadC2CMedia and uploadGroupMedia direct-upload calls.

Fix commit:

49db424c8001f2f419aad85f434894d8d85c1a09

Release

Fixed in OpenClaw 2026.4.20.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44117

CVE-2026-44117:

6.3

CVSS Score

4.0

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.20	2026.4.20

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Server-Side Request Forgery (SSRF) in the openclaw package, specifically within the QQBot media upload functionality. The functions uploadC2CMedia and uploadGroupMedia in extensions/qqbot/src/api.ts were identified as vulnerable. These functions accepted a URL from a user for direct media uploads. Before the patch, the provided URL was assigned to the request body and used without any validation. This allowed an attacker to craft a URL pointing to internal network resources or cloud metadata services. When the application processed this URL, it would make a request on behalf of the server, leading to the SSRF vulnerability.

The fixing commit 49db424c8001f2f419aad85f434894d8d85c1a09 introduces a new helper function, assertDirectUploadUrlAllowed. This function is now invoked within both uploadC2CMedia and uploadGroupMedia to validate the URL. The validation ensures the URL uses the HTTPS protocol and resolves to a public IP address, blocking requests to private, internal, or special-use IP ranges. Any runtime profile during an exploit of this vulnerability would show calls to uploadC2CMedia or uploadGroupMedia processing the malicious URL.

Vulnerable functions

uploadC2CMedia

extensions/qqbot/src/api.ts

The function `uploadC2CMedia` was vulnerable to Server-Side Request Forgery (SSRF) because it directly used a user-provided `url` to make a request without prior validation. An attacker could supply a URL pointing to an internal service, causing the server to make an unintended request. The patch mitigates this by adding a call to `assertDirectUploadUrlAllowed` to validate the URL before it is used.

uploadGroupMedia

extensions/qqbot/src/api.ts

The function `uploadGroupMedia` was vulnerable to Server-Side Request Forgery (SSRF) because it directly used a user-provided `url` to make a request without prior validation. An attacker could supply a URL pointing to an internal service, causing the server to make an unintended request. The patch mitigates this by adding a call to `assertDirectUploadUrlAllowed` to validate the URL before it is used.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.