N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-xq94-r468-qwgj

GHSA-xq94-r468-qwgj: OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding

Summary

Browser SSRF hostname validation could be bypassed by DNS rebinding.

Affected Packages / Versions

Package: openclaw
Ecosystem: npm
Affected versions: < 2026.4.10
Patched versions: >= 2026.4.10

Impact

Browser navigation policy could validate a hostname/IP resolution that differed from the address Chromium ultimately used, allowing DNS rebinding style SSRF pivots.

Technical Details

The fix tightens strict browser hostname navigation so unallowlisted hostname URLs fail closed under restrictive policy.

Fix

The issue was fixed in #64367. The first stable tag containing the fix is v2026.4.10, and openclaw@2026.4.14 includes the fix.

Fix Commit(s)

121c452d666d4749744dc2089287d0227aae2ed3
PR: #64367

Release Process Note

Users should upgrade to openclaw 2026.4.10 or newer. The latest npm release, 2026.4.14, already includes the fix.

Credits

Thanks to @zsxsoft, with sponsorship from @KeenSecurityLab and @qclawer for reporting this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-xq94-r468-qwgj

GHSA-xq94-r468-qwgj:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
openclaw	npm	< 2026.4.10	2026.4.10

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Server-Side Request Forgery (SSRF) in the browser navigation feature, exploitable via DNS rebinding. The core of the issue lies in a time-of-check, time-of-use (TOCTOU) flaw where the application validates a URL in the Node.js environment, but the actual navigation occurs within the browser's separate network stack. An attacker could use a malicious DNS server to respond with a safe IP address during the initial check and then provide a private, internal IP address when the browser makes its request, thus bypassing the SSRF policy.

The patch addresses this by fundamentally changing the validation logic in the assertBrowserNavigationAllowed and assertBrowserNavigationResultAllowed functions located in extensions/browser/src/browser/navigation-guard.ts. The fix enforces a stricter policy: when a restrictive SSRF policy is active, navigation to URLs with hostnames is blocked by default. Navigation is only permitted if the URL uses an IP literal or if the hostname is explicitly listed on an allowlist. This prevents the browser from performing a second, potentially malicious, DNS lookup, thereby mitigating the DNS rebinding attack.

The vulnerable functions identified, assertBrowserNavigationAllowed and assertBrowserNavigationResultAllowed, are central to this flawed process. They were responsible for processing and validating user-supplied URLs for browser navigation and were the entry point for the vulnerability. The function assertCdpEndpointAllowed was also identified as it was removed during the fix, indicating it was part of the vulnerable logic for validating CDP endpoints.

Vulnerable functions

assertBrowserNavigationAllowed

extensions/browser/src/browser/navigation-guard.ts

This function was responsible for validating if a navigation to a given URL is allowed. Before the patch, it would resolve the hostname to an IP and check the IP against a security policy. However, the browser would perform its own, separate DNS resolution when navigating. An attacker could exploit this Time-of-check to time-of-use (TOCTOU) race condition using a malicious DNS server that returns a safe IP during the check and a private IP to the browser, leading to a Server-Side Request Forgery (SSRF) vulnerability.

assertBrowserNavigationResultAllowed

extensions/browser/src/browser/navigation-guard.ts

This function checks the final URL of a browser navigation after all redirects have occurred. Similar to `assertBrowserNavigationAllowed`, the pre-patch version of this function was vulnerable to DNS rebinding. A navigation could be initiated with a safe URL but then redirect to a malicious hostname. This function failed to properly validate the final hostname, allowing an attacker to bypass SSRF protections.

assertCdpEndpointAllowed

extensions/browser/src/browser/cdp.helpers.ts

This function was responsible for validating the Chrome DevTools Protocol (CDP) endpoint URL. It was removed as part of the fix. The vulnerability existed because the validation of the endpoint could be bypassed using DNS rebinding, allowing the system to connect to an unauthorized CDP endpoint on the internal network. The logic was flawed as it performed a DNS check that could differ from the actual connection address resolved by the underlying network stack.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.

N/A

-

Basic Information

Basic Information

Concerned about an active attack path?

GHSA-xq94-r468-qwgj: OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

GHSA-xq94-r468-qwgj:

N/A

-

Basic Information

Basic Information

Is this CVE running in your environment?

Technical Details

Technical Details

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

Vulnerability IntelligenceMiggo AI

Unlock WAF rules for this CVE

WAF Protection Rules

WAF Rule

Reasoning

Technical Details

GHSA-xq94-r468-qwgj: OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding

Summary

Affected Packages / Versions

Impact

Technical Details

Fix

Fix Commit(s)

Release Process Note

Credits

Vulnerability IntelligenceMiggo AI

Root Cause Analysis

Vulnerable functions

N/A

N/A

Basic Information

Basic Information

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI

Vulnerability Intelligence
Miggo AI