CVE-2026-100601

ClawHub (openclaw/clawhub) application/backend contains a server-side request forgery vulnerability in the public profile preview's image fetching. The preview accepts a user-supplied image URL and checks the textual hostname against private-address patterns, but does not validate or pin the resolved network destination, so a public-looking hostname can resolve to an internal address or change resolution between validation and connection (DNS rebinding). A maintainer-run local harness demonstrated an outbound connection to an owner-controlled loopback listener; access to production internal services, credential disclosure, and code execution were not demonstrated. The issue was confirmed at revision cbfee7343ddc867316dd9b3de6fa8856730f9f41; the complete historical affected range was not established. Fixed by PR #3683, included in revision 8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650, which was deployed to clawhub.ai on 2026-09-11; self-hosted deployments should update to that revision or a later descendant. The npm CLI and OpenClaw runtime are separate products and are not affected.

• CWE-918

• https://github.com/openclaw/clawhub/commit/8c2de6c506bb4efabe3f0c2ffb8370b9e23d4650
• https://github.com/openclaw/clawhub/security/advisories/GHSA-48gp-hx8w-wjvm
• https://www.vulncheck.com/advisories/clawhub-ssrf-via-unchecked-dns-resolution-in-profile-image

Published

Sep 26, 2026

Last Modified

Sep 26, 2026

Status

Received

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100596OpenClaw versions before 2026.7.1 fail to properly authorize…8.8
• CVE-2026-100597OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnera…7.8
• CVE-2026-100598OpenClaw (npm package openclaw) before 2026.7.1 incorrectly …7.1
• CVE-2026-100599OpenClaw versions 2026.5.1 through 2026.7.0 fail to apply th…8.8
• CVE-2026-10060A vulnerability has been found in TRENDnet TEW-432BRP 3.10B2…9.8
• CVE-2026-100600ClawHub (the openclaw/clawhub application/backend) does not …5.3
• CVE-2026-100602ClawHub (openclaw/clawhub application/backend) contains a mi…6.5
• CVE-2026-100603ClawHub (openclaw/clawhub) application/backend contains a fl…5.4
• CVE-2026-100604ClawHub (openclaw/clawhub) contains an incorrect authorizati…5.4
• CVE-2026-100605Flowise through 3.1.4 contains missing route-level RBAC chec…7.1
• CVE-2026-100606Flowise through 3.1.4 (Enterprise/platform mode with SSO ena…7.7
• CVE-2026-100607Flowise through 3.1.4 resolves SSO and local-password users …7.7