5.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-r747-33r4-rmjw

GHSA-r747-33r4-rmjw: Duplicate Advisory: OpenClaw: QQBot direct media upload skipped URL SSRF validation

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-c4qg-j8jg-42q5. This link is maintained to preserve external references.

Original Description

OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in QQBot direct media upload that skips URL validation. Attackers can bypass SSRF protections by sending crafted image URLs to uploadC2CMedia and uploadGroupMedia endpoints to relay unintended requests.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-r747-33r4-rmjw

GHSA-r747-33r4-rmjw:

5.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.20	2026.4.20

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The security vulnerability is a Server-Side Request Forgery (SSRF) found in the OpenClaw QQBot extension. The root cause lies in the uploadC2CMedia and uploadGroupMedia functions located in extensions/qqbot/src/api.ts. These functions are designed to handle direct media uploads from a URL. The vulnerability existed because these functions would accept a URL from a user and use it to fetch content without validating that the URL pointed to a safe, public location. An attacker could exploit this by providing a URL that resolves to an internal or private IP address, tricking the server into making requests to internal services it should not have access to.

The patch, found in commit 49db424c8001f2f419aad85f434894d8d85c1a09, rectifies this issue by introducing a validation step. A new helper function, assertDirectUploadUrlAllowed, was added. This function is now called by both uploadC2CMedia and uploadGroupMedia before the URL is used. The assertDirectUploadUrlAllowed function performs two critical checks: it ensures the URL uses the https: protocol and then uses resolvePinnedHostnameWithPolicy to verify that the hostname does not resolve to a blocked, private, or internal IP address. By adding this explicit validation, the patch prevents the SSRF vulnerability.

Vulnerable functions

uploadC2CMedia

extensions/qqbot/src/api.ts

The `uploadC2CMedia` function was vulnerable to Server-Side Request Forgery (SSRF). It directly used a user-provided `url` to make a server-side request without proper validation. This allowed an attacker to specify internal or private network addresses, forcing the server to make unintended requests. The patch mitigates this by validating the URL with the `assertDirectUploadUrlAllowed` function before it is used.

uploadGroupMedia

extensions/qqbot/src/api.ts

The `uploadGroupMedia` function was vulnerable to Server-Side Request Forgery (SSRF). It directly used a user-provided `url` to make a server-side request without proper validation. This allowed an attacker to specify internal or private network addresses, forcing the server to make unintended requests. The patch mitigates this by validating the URL with the `assertDirectUploadUrlAllowed` function before it is used.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.