Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-h3xm-4vgq-bygg
Vulnerability ID VCID-h3xm-4vgq-bygg
Aliases CVE-2026-27488
GHSA-w45g-5746-x9fp
Summary OpenClaw hardened cron webhook delivery against SSRF ## Affected Packages / Versions - `openclaw` npm package versions `<= 2026.2.17`. ## Vulnerability Cron webhook delivery in `src/gateway/server-cron.ts` used `fetch()` directly, so webhook targets could reach private/metadata/internal endpoints without SSRF policy checks. ## Fix Commit(s) - `99db4d13e` - `35851cdaf` Thanks @Adam55A-code for reporting.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-918 Server-Side Request Forgery (SSRF)
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.00018 https://api.first.org/data/v1/epss?cve=CVE-2026-27488
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-w45g-5746-x9fp
cvssv4 6.9 https://github.com/openclaw/openclaw
generic_textual MODERATE https://github.com/openclaw/openclaw
cvssv4 6.9 https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655
generic_textual MODERATE https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655
ssvc Track https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655
cvssv4 6.9 https://github.com/openclaw/openclaw/releases/tag/v2026.2.19
generic_textual MODERATE https://github.com/openclaw/openclaw/releases/tag/v2026.2.19
ssvc Track https://github.com/openclaw/openclaw/releases/tag/v2026.2.19
cvssv3.1_qr MODERATE https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
cvssv4 6.9 https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
generic_textual MODERATE https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
ssvc Track https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
cvssv4 6.9 https://nvd.nist.gov/vuln/detail/CVE-2026-27488
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2026-27488
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2026-27488
https://github.com/openclaw/openclaw
https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655
https://github.com/openclaw/openclaw/releases/tag/v2026.2.19
CVE-2026-27488 https://nvd.nist.gov/vuln/detail/CVE-2026-27488
GHSA-w45g-5746-x9fp https://github.com/advisories/GHSA-w45g-5746-x9fp
GHSA-w45g-5746-x9fp https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
No exploits are available.
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L Found at https://github.com/openclaw/openclaw
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L Found at https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:12:23Z/ Found at https://github.com/openclaw/openclaw/commit/99db4d13e5c139883ef0def9ff963e9273179655
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L Found at https://github.com/openclaw/openclaw/releases/tag/v2026.2.19
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:12:23Z/ Found at https://github.com/openclaw/openclaw/releases/tag/v2026.2.19
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L Found at https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:12:23Z/ Found at https://github.com/openclaw/openclaw/security/advisories/GHSA-w45g-5746-x9fp
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:L Found at https://nvd.nist.gov/vuln/detail/CVE-2026-27488
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.05235
EPSS Score 0.00018
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T21:06:44.591732+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/openclaw/CVE-2026-27488.yml 38.6.0