N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-53vx-pmqw-863c

GHSA-53vx-pmqw-863c: OpenClaw: Browser SSRF policy default allowed private-network navigation

Summary

Browser SSRF policy default allowed private-network navigation.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.14
Patched versions: >= 2026.4.14

Impact

Browser SSRF protection could allow private-network navigation by default in paths where restrictive behavior was expected, exposing internal services or metadata endpoints through browser-driven requests.

Technical Details

The fix preserves strict SSRF configuration semantics, keeps private-network access disabled unless explicitly opted in, and updates loopback CDP readiness handling for the stricter default.

Fix

The issue was fixed in #66354 and #66386. The first stable tag containing the fix is v2026.4.14, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

024f4614a1a1831406e763adc40ef226e3d5e9ed
1dabfef28db523e7de81edeb3dd689e9171236a2
213c36cf51121ef6c05cfccd78037371f968f31a
7eecfa411df3d12e6b810e6ca5df47254fc3db3f
PR: #66354, #66386

Release Process Note

Users should upgrade to openclaw 2026.4.14 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-53vx-pmqw-863c

GHSA-53vx-pmqw-863c:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.14	2026.4.14

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Server-Side Request Forgery (SSRF) in the openclaw browser functionality, caused by an insecure default configuration that allowed navigation to private networks. The root cause is twofold:

The resolveBrowserSsrFPolicy function in extensions/browser/src/browser/config.ts failed to generate a restrictive SSRF policy when no explicit configuration was provided by the user. It would return an undefined or empty policy object, which was not interpreted as a "deny" rule. The patches in commits 1dabfef28db523e7de81edeb3dd689e9171236a2 and 213c36cf51121ef6c05cfccd78037371f968f31a correct this behavior to ensure a strict policy (dangerouslyAllowPrivateNetwork: false) is created by default.
The fetchCdpChecked function in extensions/browser/src/browser/cdp.helpers.ts, which is used for making requests to the Chrome DevTools Protocol (CDP), contained a dangerous default. When it received an undefined policy from its callers, it would default to policy: { allowPrivateNetwork: true }. This explicitly permitted requests to any private network IP address, creating the SSRF vulnerability. An attacker could abuse browser navigation features to make requests to internal services. The fix, visible in commit 7eecfa411df3d12e6b810e6ca5df47254fc3db3f, removes this permissive default and implements logic to handle loopback connections separately while maintaining a strict policy for all other network access.

Functions such as isChromeReachable and getChromeWebSocketUrl would appear in a runtime profile during exploitation, as they are the entry points that call the vulnerable fetchCdpChecked function without providing a secure policy, thus triggering the insecure default behavior.

Vulnerable functions

resolveBrowserSsrFPolicy

extensions/browser/src/browser/config.ts

This function was responsible for creating the SSRF policy from the configuration. Its logic was flawed, causing it to produce a permissive (empty or undefined) policy when a strict one was intended or when no configuration was provided. This allowed downstream functions to use an insecure default, leading to SSRF.

fetchCdpChecked

extensions/browser/src/browser/cdp.helpers.ts

This function makes requests to the browser's control plane (CDP). It contained a fallback policy `{ allowPrivateNetwork: true }` that was used whenever a stricter policy was not explicitly provided by the caller. This is the direct cause of the SSRF vulnerability, as it defaults to allowing private network access.

isChromeReachable

extensions/browser/src/browser/chrome.ts

This function is a runtime indicator that would appear in a stack trace during exploitation. It calls the underlying vulnerable fetch logic (fetchOk -> fetchCdpChecked) to check if a Chrome instance is available. An attacker could use this or similar functions that depend on `fetchCdpChecked` to probe internal networks due to the insecure default policy.

getChromeWebSocketUrl

extensions/browser/src/browser/chrome.ts

This function is a runtime indicator that would appear in a stack trace during exploitation. It retrieves the WebSocket URL for controlling the browser, which involves a network request made via the vulnerable `fetchCdpChecked` function. This call would be subject to the insecure default policy, allowing for potential SSRF.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-53vx-pmqw-863c: OpenClaw: Browser SSRF policy default allowed private-network navigation

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-53vx-pmqw-863c:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Basic Information

Basic Information

GHSA-53vx-pmqw-863c: OpenClaw: Browser SSRF policy default allowed private-network navigation

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Technical Details

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI