N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-h97f-6pqj-q452

GHSA-h97f-6pqj-q452: OpenClaw has a IPv6 multicast SSRF classifier bypass

Summary

OpenClaw's SSRF IP classifier did not treat IPv6 multicast literals (ff00::/8) as blocked/private-internal. This allowed literal multicast hosts to pass SSRF preflight checks.

Impact

A bypass in address classification existed for IPv6 multicast literals. OpenClaw's network fetch/navigation paths are constrained to HTTP/HTTPS and this was triaged as low-severity defense-in-depth hardening.

Affected Packages / Versions

Package: openclaw (npm)
Affected versions: <= 2026.2.24
Patched versions: >= 2026.2.25

Technical Details

The IPv6 private/internal range set omitted multicast, so addresses like ff02::1 and ff05::1:3 were not classified as blocked by the shared SSRF classifier.

Fix Commit(s)

baf656bc6fd7f83b6033e6dbc2548ec75028641f

Release Process Note

patched_versions is pre-set to the planned next npm release (2026.2.25). Once that release is published on npm, the advisory is published.

OpenClaw thanks @zpbrent for reporting.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-h97f-6pqj-q452

GHSA-h97f-6pqj-q452:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	<= 2026.2.24	2026.2.25

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the incorrect classification of IPv6 multicast addresses, allowing for a Server-Side Request Forgery (SSRF) bypass. The analysis of the provided patch baf656bc6fd7f83b6033e6dbc2548ec75028641f pinpoints the exact location of the vulnerability. The file src/shared/net/ip.ts was modified to include "multicast" in the PRIVATE_OR_LOOPBACK_IPV6_RANGES set. This set is used by the isPrivateOrLoopbackIpAddress function to check if an IP address belongs to a private or loopback range. The associated test files, src/infra/net/ssrf.test.ts and src/shared/net/ip.test.ts, confirm that this function is the one responsible for the IP address validation and that the fix involves adding test cases for IPv6 multicast addresses. Therefore, the isPrivateOrLoopbackIpAddress function is the vulnerable function as it contained the flawed logic that was exploited.

Vulnerable functions

isPrivateOrLoopbackIpAddress

src/shared/net/ip.ts

The function `isPrivateOrLoopbackIpAddress` in `src/shared/net/ip.ts` did not correctly classify IPv6 multicast addresses as private. The vulnerability was fixed by adding `"multicast"` to the `PRIVATE_OR_LOOPBACK_IPV6_RANGES` set, which is used by this function to determine if an IP address is private. Before the patch, an attacker could use an IPv6 multicast address to bypass SSRF protection.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-h97f-6pqj-q452: OpenClaw has a IPv6 multicast SSRF classifier bypass

Summary

Impact

Affected Packages / Versions

Technical Details

Fix Commit(s)

Release Process Note

GHSA-h97f-6pqj-q452:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Basic Information

Basic Information

GHSA-h97f-6pqj-q452: OpenClaw has a IPv6 multicast SSRF classifier bypass

Summary

Impact

Affected Packages / Versions

Technical Details

Fix Commit(s)

Release Process Note

Technical Details

N/A

N/A

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI